ATutor account take over using type juggling 1 January 2024·1138 words·6 mins Abusing PHP loose comparison in ATutor’s password reset flow to take over an arbitrary account.