writeups.xyz / Using a GitHub app to escalate to an organization owner for a $10,000 bounty

Submitter : c2a

Date: 20 June 2018

Bounty : 10,000

Vulnerabilities :

• Broken Authorization
• IDOR

Programs :

• GitHub

Authors :

• Tanner Emek (@Itscachemoney)

Link :
https://medium.com/@cachemoney/using-a-github-app-to-escalate-to-an-organization-owner-for-a-10-000-bounty-4ec307168631