Kongsec
Jul 13, 2021

--

When I pass phone number to username Param it was disclosing entity Id of user in response. I didn't guess algorithm , it was all there

--

--

Kongsec
Kongsec

Written by Kongsec

#kongsec | Solo Bounty Hunter | Function Exploits and Report Crafting | Bikes | Not a XSS guy | Own views | Bugcrowd Top 100 l Top 10 P1 warriors | Biker

No responses yet