Mesalam

صياد حشرات

[Mesalam @Mesalam_340]

OpenRedirect Lead To AccountTakeOver

[Mesalam @Mesalam_340]

@rootC1d3 Its External Program

[Mesalam @Mesalam_340]

I Love This Game 🧐

[Mesalam @Mesalam_340]

@Void_0Z دي الشركه الي اسمها Tips ؟

[Mesalam @Mesalam_340]

@ColliCryptoboy I think I will focus on working on external programs

[Mesalam @Mesalam_340]

😠

[Mesalam @Mesalam_340]

@goldenape36 No you have to be in the org with any permission

[Mesalam @Mesalam_340]

Classic IDOR

[Mesalam @Mesalam_340]

@zoal_z Reflected

[Mesalam @Mesalam_340]

Parameter for Redirect Lead To Reflected Xss

[Mesalam @Mesalam_340]

@mirzaadzare @Bugcrowd i work on external programs

[Mesalam @Mesalam_340]

In this moment i say what if i was blackhat

[Mesalam @Mesalam_340]

@Nightmaresrea The Duplicate smile to you😃

[Mesalam @Mesalam_340]

@Therealmoe_2 i did it but the cookie have HttpOnly

[Mesalam @Mesalam_340]

@Therealmoe_2 They have BBP, However they state that based on its classification where reflected XSS is considered low severity the payout is $50

[Mesalam @Mesalam_340]

@Therealmoe_2 Yes

[Mesalam @Mesalam_340]

Forced-Redirect Flaw

[Mesalam @Mesalam_340]

@HuynhPhuon89764 Bug bounty programs pay really well, and without the headaches or legal hassles.

[Mesalam @Mesalam_340]

@wangluo8005 这波属实是裸奔了。

[Mesalam @Mesalam_340]

@goldenape36 Yes

[Mesalam @Mesalam_340]

@MeshvPatel18 sure

[Mesalam @Mesalam_340]

بجد حوار انك تعمل validation ل ثغره ال agent الي مطلعها اصعب من ال hunt نفسه