A detailed breakdown of Account Takeover — from initial recon to exploiting a critical security misconfiguration that led to full admin access.