Chaining Bugs to get my First Bug Bounty

First Bug Bounty

Openredirection + clickjacking + csrf -> Account Takeover

Bounty

Hola Hackers,

This writeup is about my first bug bounty in which the submission was duplicate, even though they rewarded me for chaining the bugs and reported it with an effective approach of a real-life attack scenario.

Let’s Start

First we will discuss about the bugs which I chained together.

Open Redirection
Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection …

account takeover bounty bug bug bounty bug-chaining bugs csrf vulnerability