eMudhra Login Bypass

·Hacker News··

Attached: 1 video do you have any trust in eMudhra after the `4` incident? glad that at least the RSA certificates were safe? fear not, here's a complete bypass of their 1fa otp login system. they encrypt OTPs to a public key and issue those behind cloudflare turnstile. this key to be precise: ``` -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/OR1az+yTKt1ZONkk+T owML34smGCo8evpk4zLCsrc+LXtX20yERombX4xh2Sd3VDFML2LuOavB3PwGFfL0 Qr+gGPomq23nqaX9nr5SeSTpFbrxsEEVdipXX

Read full article →

Related Articles

Google Chrome silently installs a 4 GB AI model on your device without consent
john-doe · Hacker News · 5mo ago
DNSSEC disruption affecting .de domains – Resolved
warpspin · Hacker News · 5mo ago
Security through obscurity is not bad
mobeigi · Hacker News · 5mo ago
US healthcare marketplaces shared citizenship and race data with ad tech giants
ZeidJ · Hacker News · 5mo ago
The text mode lie: why modern TUIs are a nightmare for accessibility
SpyCoder77 · Hacker News · 5mo ago