This will prompt the following window in which you will need to enter the password of the account once more. Now, logged in with a hijacked account (I own all of these accounts personally) seen below, you'd want to head over to "Settings". As seen below you'll need the generated security code.
Keep in mind that you need email access to properly perform account authentication and access the accounts settings. My goal would be to identify the email address associated with our account through Riot's ticketing systems and hope that the password of the account is being reused on the email. I'll go ahead and sign into Riot's main webpage. This is the attack scenario, I'm the hacker and I got your bought riot account. Let's say a hacker has the credentials to the account you bought? What's the worst they can do? They can't change/know what the email is. However, if you have bought an account and don't remember the email it's associated with, you're in the shit. For example, having the ability to see anyone's orders. From my experience disclosing vulnerabilities to such sites, they often have a high volume of IDORs. Moreover, boosting/account-selling sites historically have really poor security postures. From some light scraping, I've identified over ~4ooo RIOT accounts leaked in the wild. They're full of bugs and their DBs do leak every now and then. Since the dawn of time, the main way to obtain main and smurf accounts has been from boosting sites. From a security perspective, ill paint an attack scenario demonstrating the risks of buying RIOT accounts & how someone with malicious intentions could go about hijacking it.
#Buy league of legends account how to
In this post, I'll show you how to rediscover the email of your 8-year-old RIOT account (which you obviously registered with a bullshit email).
I can not be held responsible for any error or negligence derived therefrom, use at your own risk. Do not attempt to violate the law with any of the material contained here. 4 min read This material is for educational and research purposes only.
0 kommentar(er)
