Tag: bug bounty writeup
2FA Bypass Through OAuth Misconfiguration: Patterns and Fixes
A real-world example of bypassing 2FA due to OAuth misconfiguration involves attackers exploiting improper validation of redirect URIs or token reuse flaws in third-party OAuth integrations. By abusing Single Sign-On ...
Broken Access Control Explained: How IDOR Bugs Are Found and Fixed
This detailed blog explores a real-world exploitation of Broken Access Control vulnerability reported on HackerOne that resulted in a $5000 bounty. It dives deep into how the researcher discovered insecure privilege e...
