idor misconfiguration vulnerability poc|| bug bounty 2023

attacker can email address sauce fully charged without any password this is a security misconfiguration vulnerability

[@rh1dayah]

Why you put invalid email than in burp you remove the invalid so weird this is not bug, you are not hacker

[@0xaexon]

Saya pikir itu tidak valid

[@muhamadnazril6494]

Oh begitu ya​@@0xaexon

[@miladmehdi-gp3rn]

Thank you 👏very good

[@Avoshsecurity]

mokhlesiim

[@specl_ed1tz]

Please correct me your finding is that the email you updated and try to login with previous credentials but not login after that you tried to send forget password through previous email and it send the link in the email that is misconfigration

[@allexpradhan4260]

😮

[@Adarsh.-.]

like we have to add extra letters in email address and change it in intercepted request after forwarding it will not ask for password right?

[@Avoshsecurity]

No, it is not like that, we are only checking the issue of not having a limit in this target

[@rohancyber]

not understannd bro can anyone please explain me

[@macquan7454]

i need your latest video about sqli, but u made it private

[@Avoshsecurity]

Hi dear friend
I deleted the video and will re-record and post it today

[@SHORTVIDEO-kn1qk]

biunty,?

[@Adarsh.-.]

Can explain it or can u share the report

[@Avoshsecurity]

Hello my friend, please activate the subtitles and watch the video again

[@Adarsh.-.]

Subtitles is off