Study
-
[Bugbounty Study] #Mail.Ru _ Account TakeoverStudy/Bugbounty Study 2020. 3. 23. 20:22
# Mail.Ru Ext.B Scope (geekbrains.ru) Account Takeover _ \$1500 https://medium.com/@godofdarkness.msf/mail-ru-ext-b-scope-account-takeover-1500-abdb1560e5f9 Mail.Ru Ext.B Scope Account Takeover [ $1500 ] Hi i want to share how i found account takeover bug in geekbrains.ru . medium.com 해당 사이트는 많은 애플리케이션들과 OAuth* 인증을 공유하고 있다. OAuth 로그인을 위한 이메일 주소를 확인한다. (gmail로 로그인한 후 다시 twitter로 로그인해도 같은 계정이다.) [..
-
[Bugbounty Study] #Starbucks _ XSS & LFIStudy/Bugbounty Study 2020. 3. 22. 06:53
# Reflected Cross site Scripting (XSS) _ $375 https://hackerone.com/reports/438240 Starbucks disclosed on HackerOne: Reflected Cross site Scripting... **Summary:** Reflected Cross site Scripting (XSS) on https://www.starbucks.com/account/signin?ReturnUrl **Description:** The attacker can execute javascript on the victims account just after the authentication process. **Platform(s) Affected:** ww..