@xssdoctor Did they triage this, I have similar experience, they saying out of scope, since installation of malicious app is already user has local access
@AnshhBohara hi can you please help me ,i found openredirect in oauth ,i can get oauth code to myserver but cant exchange it for token ,because of redirect_uri is my site (code generated using mysites url) so it throws "untrusted_redirect_uri" at /api/external/v1/oauth-server/token
hi can anyone please help me ,i found openredirect in oauth ,i can get oauth code to myserver but cant exchange it for token ,because of redirect_uri is my site (code generated using mysites url) so it throws "untrusted_redirect_uri" at /api/external/v1/oauth-server/token
@Nightmaresrea hi can you please help me ,i found openredirect in oauth ,i can get oauth code to myserver but cant exchange it for token ,because of redirect_uri is my site (code generated using mysites url) so it throws "untrusted_redirect_uri" at /api/external/v1/oauth-server/token
@andrd3v Nice bro, I really wonder how skilled are you at 18 year. Can you please guide to get into this low level pentesting and stuff, I hope you will reply thanks