Full Team Takeover

Hare Krishna! My name is Tuhin Bose (tuhin1729). I am currently working as a CTF Designing Consultant at BugBase. In this write-up, I am going to share one of my findings which allowed me to takeover anyone’s team.
So without wasting time, let’s directly jump into the blog:

Introduction:

Basically, the target is a forum where people can interact with each other, create team with others etc. While analyzing the team functionality, I have noticed the following …

bug bounty cybersecurity information security penetration testing takeover team vulnerability