writeups.xyz / DOS attack possible on Reset 2FA feature of #Hackerone

Submitter : c2a

Date: 26 June 2023

Bounty : undisclosed

Vulnerabilities :

• Application-Level DoS
• Lack of Rate Limiting

Programs :

• HackerOne

Authors :

• Lokesh Ranjan

Link :
https://medium.com/@lokesh.leads13/disallow-any-hackerone-user-permanent-access-to-his-her-own-hackerone-account-using-vulnerability-147ce9957692