pentester.land· Apr 14, 2018· by Max (@0xw2w)💰 Bounty: 59,400

How I hacked companies related to the crypto currency and earned $60,000

Open Original Article ↗
Target Program: okex.com, livecoin.net
🎯 Vulnerability: Insecure Direct Object Reference (IDOR)
💡 Defense Fix: Enforce object-level access control checks (ABAC/RBAC) on the server side for every API request.
#Broken authorization#CSRF#IDOR#Stored XSS#HTML injection