@tabaahi_ i think he would have appreciated more if you didnt straight report the bug but discuss with him how exactly you found that bug.
this will help the community deepdive into how a successful hunters brain works.
Nonetheless, youre doin great!
I find a subdomain that has a login. I don't have access. If I create an account, it has to be approved...
No problem ๐
I read the JS files > find some interesting paths like /proxy/... > Python script to extract all the URIs from JS > full access to data๐ฅ#bugbountytips