writeups.xyz / Is Math.random() Safe? from missing rate limit to bypass 2fa and possible sqli

Submitter : c2a

Date: 20 February 2021

Bounty : undisclosed

Vulnerabilities :

• Race Condition
• Lack of Rate Limiting
• OTP Bypass
• SQL Injection

Programs :

• Undisclosed

Authors :

• Yasser Mohammed (@Boomneroli)

Link :
https://neroli.medium.com/is-math-random-safe-from-missing-rate-limit-to-bypass-2fa-and-possible-sqli-2a4ea66f82c5