Rate Limit Bypass at Readme.com
Target Program: Readme.com
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
More Writeups Like This
pentester.land
by Mosaad Sallam (@h0tak88r)Unlocking the Weak Spot: Exploiting Insecure Password Reset Tokens
pentester.land
by BBHC (@community_bug)$500 For No Rate Limit On Forgot Password Page
pentester.land
by Takester (@dhiraj_ramteke)My first and last crit of 2020 on Hackerone
pentester.land
by Ahmed (@ahzsec)