---
title: "Mohammad Reza Mirzadzare (@mirzadzare) | Hashnode"
description: "Bug Bounty Hunter. Read the latest articles by Mohammad Reza Mirzadzare on Hashnode."
url: "https://hashnode.com/@mirzadzare"
---

@mirzadzare

# Mohammad Reza Mirzadzare

@mirzadzare · Joined November 2025

Bug Bounty Hunter

[Website](https://mirzadzare.net/)

### [IP Spoofing to Account Takeover: You Patched It? Really?](https://blog.mirzadzare.net/ip-spoofing-to-account-takeover?utm_source=hashnode&utm_medium=feed)

Explains how an OAuth patch was bypassed using IP spoofing and chained bugs to achieve account takeover, revealing flaws in authentication defenses.

7 min read · [blog.mirzadzare.net](https://blog.mirzadzare.net/ip-spoofing-to-account-takeover?utm_source=hashnode&utm_medium=feed)

[Feb 20](https://hashnode.com/posts/ip-spoofing-to-account-takeover/699845e6014d86b82dde75d4)

### [From "Log in with OAuth" to "Your Account Is Mine" – Desktop App Edition](https://blog.mirzadzare.net/from-log-in-with-oauth-to-your-account-is-mine-desktop-app-edition?utm_source=hashnode&utm_medium=feed)

Security flaw in desktop app OAuth allows account takeover with malicious links. Understand attack steps, why it works, and fix strategies

9 min read · [blog.mirzadzare.net](https://blog.mirzadzare.net/from-log-in-with-oauth-to-your-account-is-mine-desktop-app-edition?utm_source=hashnode&utm_medium=feed)

[2](https://hashnode.com/posts/from-log-in-with-oauth-to-your-account-is-mine-desktop-app-edition/692d4ba3e3cea7afcaf37031) [Dec 1, 2025](https://hashnode.com/posts/from-log-in-with-oauth-to-your-account-is-mine-desktop-app-edition/692d4ba3e3cea7afcaf37031)