writeups.xyz / Optimizing Hunting Results in VDP for use in Bug Bounty Programs - From Sensitive Information Disclosure to Accessing Hidden APIs which can be used to Retrieve Customer Data

Submitter : c2a

Date: 15 November 2020

Bounty : 4,750

Vulnerabilities :

• Information Disclosure
• Broken Access Control
• IDOR
• SQL Injection

Programs :

• Undisclosed

Authors :

• YoKo Kho (@YokoAcc)

Link :
http://www.firstsight.me/2020/11/optimizing-hunting-results-in-vdp-for-use-in-bug-bounty-programs-from-sensitive-information-disclosure-to-accessing-hidden-apis-which-can-be-used-to-retrieve-customer-data/