Flipkart, this is straight-up deceptive.
Higher discount in search, but the moment I open the product, it drops โ with no real extra charges.
โน655 order, โน7 feeโฆ yet discount falls by 7%? What kind of shady math is this?
Stop misleading customers.
@Flipkart@flipkartsupport
1) Sometimes svg file upload can leads to blind xss on support desk (same as svg xss).
2) check for the redirect parameter and append javascript:alert'1' payload.
3) Bypass 2FA through IP-Rotate burp extension.
If anyone need stats i have found more than 5 instances of this vulnerability : https://t.co/2FRGFUcSMk
It exist and easy win. Sometime u need to tweak a bit to make it work ;)
#BugBounty
How we made $120 000 in bug bounty programs with our tool and started a company in 2022 - we described our journey in a new article. Lots of tips based on months of research and 143 bug bounty reports. https://t.co/dYNcxRGwxE
๐GBounty is a Golang command-line implementation of Burp Bounty Pro Scanner
๐To celebrate the release of the GBounty, I'm giving away three licenses for one year among all the people who RT this post and follow @GBountySecurity
๐The winners will be announced next february 9