Bug bounty write ups review | graphql leads to bypass 2FA (Arabic)

https://t.co/wrrUOrl6ee

Twitter: https://twitter.com/0x_rood
Telegram: https://news.1rj.ru/str/alien_rood
Write up url: https://medium.com/@mohammed0x04/how-i-found-two-api-vulnerabilities-using-website-source-code-6c4b0dc54d6f

شرح ثغرات business logic error + تطبيق على لابات portswigger الجزء الاول

https://t.co/jeuD9rU7Jl

شرح ثغرات business logic error + تطبيق على لابات portswigger الجزء الثاني

https://t.co/v9yQaraDIC

شرح ثغرات business logic error + تطبيق على لابات portswigger الجزء الثالث

https://t.co/m8e3DVHya0

Intersting finding:
1- Found applicaion for website
2- Logout and found this endpoint at burp api/logout/My_id
3- So here we have idor at logout
4- Make noscript with chatgpt that's take loop on all Users id
5- Dos attack for to immobilize all users

#bugbountytips…