Bypassing authorization check with secondary path traversal #bugbounty #bugbountytips #bugbountyhunt

Full video: https://youtu.be/bIO3PSblExI
📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw

This video is a part of an explanation of the writeup of 4 bugs in Azure Health bot. The bugs were 2x RCEs, a path traversal and a memory leak.

Report: https://www.breachproof.net/blog/lethal-injection-how-we-hacked-microsoft-ai-chat-bot
Reporter's Twitter: https://x.com/Yanir_/status/1787927285443494137

azure bot bugs health leak memory memory leak path path traversal video writeup