writeups.xyz / [Account Takeover] Don’t Send a Message to anyone Before Reading This [External Audit]

Submitter : c2a

Date: 7 March 2023

Bounty : undisclosed

Vulnerabilities :

• HTTP Response Manipulation
• Authentication Bypass
• Account Takeover

Programs :

• Undisclosed

Authors :

• Vipul Sahu

Link :
https://infosecwriteups.com/dont-send-a-message-to-anyone-before-reading-this-account-takeover-vulnerability-external-audit-cf584a0c983c