pentester.land· Feb 2, 2022· by nOOb_mAsTeR

No Rate Limiting on OTP sending

Open Original Article ↗
Target Program: -
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#Bruteforce#Lack of rate limiting

More Writeups Like This

pentester.land

Unlocking the Weak Spot: Exploiting Insecure Password Reset Tokens

by Mosaad Sallam (@h0tak88r)
pentester.land

My First Un-Expected $$$$ Digit Bounty for an Un-Expected Vulnerability

by Shobhit Mehta
pentester.land

My Account Takeover Writeup: $5000

by MRD7 (@_mrd7_)
pentester.land

PII Disclosure of Apple Users ($10k)

by Ahmad Halabi (@Ahmad_Halabi_)