pwn
@pwnfunction.bsky.social
If you found a multistage/step functionality like login, try to break the flow!
Normal flow:
1. Email & Password 2. OTP confirmation 3. Login
Hacker flow:
1. Email & Password 2. Skip this step 3. Request to this step and login (:
Normal flow:
1. Email & Password 2. OTP confirmation 3. Login
Hacker flow:
1. Email & Password 2. Skip this step 3. Request to this step and login (:
September 9, 2023 at 5:57 AM
If you found a multistage/step functionality like login, try to break the flow!
Normal flow:
1. Email & Password 2. OTP confirmation 3. Login
Hacker flow:
1. Email & Password 2. Skip this step 3. Request to this step and login (:
Normal flow:
1. Email & Password 2. OTP confirmation 3. Login
Hacker flow:
1. Email & Password 2. Skip this step 3. Request to this step and login (: