Back to Playbooks
Vulnerability
vuln-account-takeover
Account takeover (ATO) testing — password reset flaws, OAuth misconfig, session fixation, CSRF chain to ATO, XSS cookie theft, IDOR-based ATO, credential stuffing, email change without verification.
Slug
vuln-account-takeover
Category
Vulnerability
Run Playbook
/gitest vuln-account-takeover