---
title: "zijian xiao (@m4ra7h0n) | Hashnode"
description: "zijian xiao (@m4ra7h0n) writes on Hashnode. Read their latest articles and follow their work."
url: "https://hashnode.com/@m4ra7h0n"
---

@m4ra7h0n

# zijian xiao

@m4ra7h0n · Joined December 2024

## Comments

[very nice article.](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67aeb0a4db3727f7cf7a6de2)

Comment · Article · Feb 14, 2025 · [$9240 Bounty in 30 days Hunt Challenge](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18)

[However, if you are signing up for a new user victi.m@gmail.com, the link must also go to victi.m@gmail.com, so it is impossible to bypass 2FA at victim@gmail.com](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67aea99387075498e739bfd7#reply-67aeaaaae225fe49b468b541)

Reply · Article · Feb 14, 2025 · [$9240 Bounty in 30 days Hunt Challenge](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18)

[The 2FA Bypass with Grant Access section is not very clear. The redirect must be victim@gmail.com. If the redirect is to victi.m@gmail.com, the user is a new user, and 2FA is not enabled](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18/comment/67aea99387075498e739bfd7)

Comment · Article · Feb 14, 2025 · [$9240 Bounty in 30 days Hunt Challenge](https://hashnode.com/posts/9240-bounty-in-30-days-hunt-challenge/65340812183f53029f4b7b18)