Lokesh

bug bounty hunter

[Lokesh @Bug_Wraith]

@intigriti Account lockout isn’t out of scope in this program I clearly demonstrated. The triage only review the OTP bypass at email change and marked it OOS,but didn’t check the full demonstration. This is a clear authentication flaw. I’ll share a report with video PoC—please review again.

[Lokesh @Bug_Wraith]

@Yamaha629528217 @intigriti Dude the flow is different and you don't know that, stop wasting time on commenting. And as you think that the pre ATO is the another name of acc lockout then you need to know the vuln and impact first! Start working on that

[Lokesh @Bug_Wraith]

Need justice with my report @intigriti
Triage can’t even differentiate between Pre-ATO and account lockout.
Even after full steps + working video PoC, the response was:
‘If the customer wants, they can just create another account with a different email.’
#intigriti #valid #bbh

[Lokesh @Bug_Wraith]

@Yamaha629528217 @intigriti It's not oauth squatting dude, it's acc lockout via email change function

[Lokesh @Bug_Wraith]

@Yamaha629528217 @intigriti Dude it's account lockout, but they close it as oos under pre ATO 😶
(The case is the triage didn't understand the logic behind that, from my side I show the complete steps to reproduce with video poc🥱)

[Lokesh @Bug_Wraith]

@Yamaha629528217 @intigriti It's completely verified mail including kyc!

[Lokesh @Bug_Wraith]

@oxxxssh You disabled dms dude.
Now I changed my settings so you can dm directly.

[Lokesh @Bug_Wraith]

@Anh084879445581 @Hacker0x01 Dude can we Collab?

[Lokesh @Bug_Wraith]

@_zSecurity_ Congratulations 🎉

You can teach live bug bounty hunting on next course 👀

[Lokesh @Bug_Wraith]

@Suryesh_92 Platform name?

[Lokesh @Bug_Wraith]

@abhitwt What was the model?

[Lokesh @Bug_Wraith]

@rikeshbaniya @Hacker0x01 Do you follow any checklist?

[Lokesh @Bug_Wraith]

@brutecat Pretty cool🫡

[Lokesh @Bug_Wraith]

@FDogenews32 7

[Lokesh @Bug_Wraith]

@intigriti Challenge accepted!

[Lokesh @Bug_Wraith]

@Bugcrowd Raspberry Pi 🏃🏻‍♂️

[Lokesh @Bug_Wraith]

@DearS_o_n Missing the charging socket 👀

[Lokesh @Bug_Wraith]

@darshal_ All