writeups.xyz / How I managed to hack User accounts of a billion-dollar sport platform

Submitter : c2a

Date: 4 December 2021

Bounty : undisclosed

Vulnerabilities :

• OTP Bypass
• Bruteforce
• Lack of Rate Limiting

Programs :

• Undisclosed

Authors :

• Vishnuraj

Link :
https://medium.com/@vishnu0002/how-i-managed-to-hack-into-a-billion-dollar-sport-platform-7cc667081229