Account takeover through changing id in reset password

Hello everyone! I hope all of you who are reading this are in good health and having a wonderful day! My name is Jody ritonga from Indonesia. And for todays writing. I will share you my bug bounty writeup which i’ve found one week ago in one of indonesian new startup.

I’m absolutely fascinated by this type of bug because it’s mind-boggling how numerous developers end up making the same mistake, albeit with different …

bounty-program bug bounty bug-bounty-tips hacking web