A month focused on @yeswehack programs:
6 reports accepted (1 High, 5 Medium). 2 more under review.
Thanks to the triage teams for the fast turnaround.
https://t.co/eA3gV8X88E #YesWeRHackers
Our second write-up winner is uug4na (@uug4na_)! ๐
The most thorough investigation of the batch. uug4na documented the entire journey from analyzing the CSP and reading the minified JS bundle, to attempting XSS, schema bypasses, and crypto-based attacks before landing on the real bug. Every dead end is captured with detailed screenshots, showing how the solution was found, not just what it was.
Read it here ๐
https://t.co/2XUtO1wmtU