Researcher Bypasses eMudhra's One-Time-Password Login With a Public Key
eMudhra Login Bypass
A security researcher on Mastodon demonstrated a complete bypass of eMudhra's one-factor OTP login. The service encrypts one-time passwords to a public key and hands them out behind Cloudflare Turnstile, so anyone holding that key can craft their own OTP requests. The proof-of-concept brute-forces codes at full speed after a single Turnstile pass, and the researcher notes it could be used to hijack existing eMudhra certificates by finding the associated email. Commenters compare it to the company's earlier "4" incident.
It's not as cool as a leaked CA cert key, but you can basically just rob any existing eMudhra cert with this by just OSINTing the associated email and fucking logging in, lmfao.