1- Fuzz tagert

2- login/cpanel redirect me to endpoint that's display all login attempets with users IP and usernames

#bugbountytips #BugBounty

sorry it's wrong photo but i get 2 high bugs from this endpoint, second bug is

1- I tell you before that's endpoint print usernames
2- so i put xss payload in username input
3- now this endpoint is vurnable to stored xss

just replace photos 😂

#bugbountytips…

POC of sample type of cache posining you can test it
By: lazy pentester

https://t.co/dvNCjtxJZb

#bugbounty #bugbountytips