Robin

[Robin @Robinhoodd2580]

@Wild_Carrd @Bugcrowd Have some queries can how can I reach out?

[Robin @Robinhoodd2580]

@yamarajislitaf Hi bro thanks for this article I tried got some new subdomains with yandex dork but
how to find sensitive or internal files or misconfiguration keywords to select like some of dorks are russian should use that? This is little bit new for me as I am a new hunter can u guide me

[Robin @Robinhoodd2580]

@Mdhsan19 I’m new to bug bounty and recently had same report downgraded from P3 to P4 on Bugcrowd. I wanted to ask if you’d be open to giving some advice on how to better justify impact for a P3.

[Robin @Robinhoodd2580]

@sl4x0 I have seen videos of this and articles as well but the program says not importing these entries as dependencies. I have got confused due to different sources So can u clarify it little how to actually determine it is a internal dependency??

[Robin @Robinhoodd2580]

@bug_vs_me Hey! Just curious — the coin you got, was that from a CTF event or was it for something else? I'm a new bug hunter, so I’m trying to learn how these things work. Looks really cool!

[Robin @Robinhoodd2580]

@assa2940 @ProwlSec @coffinxp7 @Hacker0x01 @iamunixtz @GodfatherOrwa @Joyerz5 @kassem_S94 @LegionHunter Thanks man

[Robin @Robinhoodd2580]

@HMohit07 @Bugcrowd Great waiting for it!!

[Robin @Robinhoodd2580]

@0x_xnum @NASA How did u find it can u explain in short?

[Robin @Robinhoodd2580]

@mugh33ra @GodfatherOrwa @coffinxp7 Hey are you logged in or this is visible directly? Without authentication

[Robin @Robinhoodd2580]

@Sank_Sec @exploit_msf @Bugcrowd He found a actuator/heapdump endpoint. Then he used strings and grep to extract the jwt access token leading to ATO.

[Robin @Robinhoodd2580]

@alrabd1 Ok thanks man

[Robin @Robinhoodd2580]

@puneet_hack3r Bhai think sideways can you elaborate a little please. Or if you are planning to do write up that will also be great.

[Robin @Robinhoodd2580]

@0xw2w Hey i am new hunter I am not able to understand can u explain me a little with example where this is injected exactly how 1 click ato is happening

[Robin @Robinhoodd2580]

@Mr_mars_hacker Thanks will give it a try

[Robin @Robinhoodd2580]

@Mr_mars_hacker @xpl0itmE Ok

[Robin @Robinhoodd2580]

@0xbartita Hey can you explain me little a real world impact of this how a attacker can exploit it I am bit confused about that.

Secondly just confirming once a saml response is sent and you are logged it should invalidate u should not be able to use same saml response again right?

[Robin @Robinhoodd2580]

@Mr_mars_hacker @xpl0itmE Ye I did but the triager on h1 and bugcrowd replied same it is 3rd party and all like what to do in this case?