writeups.xyz / Road to (unauthenticated) recovery: downloading GitHub SSO bypass codes

Submitter : c2a

Date: 25 June 2017

Bounty : undisclosed

Vulnerabilities :

• Broken Authorization

Programs :

• GitHub

Authors :

• Yasin Soliman (@SecurityYasin)

Link :
https://ysx.me.uk/road-to-unauthenticated-recovery-downloading-github-saml-codes/