This Overlooked Vulnerability Can Cause Massive Damage (Live Demonstration) | Bug Bounty | 2024

[@BibleOSINT]

As I'm a beginner in bug bounty, you have explained this excellent!

[@BePracticalTech]

@@BibleOSINT Really happy that you liked it

[@BibleOSINT]

@BePracticalTech would you recommend me as beginner in bounty to look for those vulnerabities?

[@морс-ф3д]

Brilliant!!!!!!!!!!! Thank you for sharing your great knowledge!!!!!!!

[@Muby_Ajiwa]

I really like the way you teaching. Thanks you so much keep up the good work

[@BePracticalTech]

@@Muby_Ajiwa Thank you for the humble words!

[@Offsec-n4n]

what is the impact of creating multiple dashboards and how it effects to organizations and why they will pay $**** digits of bounty for this ??

[@BePracticalTech]

In this example, The local users were only supposed to create 3 dashboards and if they want to create more dashboard they either need to get the premium account or login as admin user. However, we were successfully able to bypass this restriction and able to create more than 3 dashboards so it is an access control issue.
Now in real world, If an attacker is able to access premium feature without the need to get the subscription, it will be a financial loss for the organization. Hope you understand!

[@victorgomesgomes]

@@BePracticalTech You can also test under Current user limit: 5/5 to do a bypass with this current application: 6/5

[@shivakumarmv4249]

Excellent...Thanks for sharing

[@BePracticalTech]

@@shivakumarmv4249 I am really glad you liked it!

[@the_sandman00]

Great explanation!

[@BePracticalTech]

Thank you!

[@sonamohan6194]

awesome! Really well-explained as well!!

[@BePracticalTech]

Thank you kindly!

[@Ch4ndan_das]

thank u so much sir for giving this use full video

[@BePracticalTech]

I am really glad that you found this video helpful!

[@i_am_your_king]

Thank you for the video I tried to enter the page to try the method, but it gives an error message. Error code 522 Connection timed out

[@BePracticalTech]

@@i_am_your_king Try again please

[@Unknown_feed]

Love from Nepal ❤❤

[@BePracticalTech]

@@Unknown_feed Love from 🇮🇳

[@vijay_sawant]

I have been watching you for a long time, and you are really a great teacher

[@BePracticalTech]

Glad to hear that!

[@Knownsense_world_]

Thanks ❤

[@BePracticalTech]

Glad you liked it!

[@starlox0]

Awesome Video😀Understood clearly

[@BePracticalTech]

Glad it helped

[@HadkerX]

Thanks

[@BePracticalTech]

No worries! Glad you liked it

[@newuser2474]

Bro but what will be mitigation for this issue 😮

[@l00pzwastaken]

Kya hal hai nice video :) good research and explanation bhai

[@BePracticalTech]

Thanks a lot :)

[@Hell_Beast_Gaming_YT]

awesome!

[@BePracticalTech]

@@Hell_Beast_Gaming_YT Thank you!

[@Hell_Beast_Gaming_YT]

@@BePracticalTech Buddy, I’ve been preparing for the CEH exam for the past six months, and now I’m planning to take the test. However, I’m still confused about how to ensure success in cracking the exam. Can you guide me on this ?

[@Hell_Beast_Gaming_YT]

@@BePracticalTech Buddy, I’ve been preparing for the CEH exam for the past six months, and now I’m planning to take the test. However, I’m still confused about how to ensure success in cracking the exam. Can you guide me on this?

[@한국어의이름이라면강]

i wanna see this app source code

[@a.c.5985]

Is it possible to see a real example?

[@vulncrax]

Keep it up 🎉

[@BePracticalTech]

Always

[@mohammadrezafarahani9287]

Please share that code

[@z3r0X0r]

Thanks for give us this type really good challenge

[@BePracticalTech]

My pleasure 😊

[@harshthakar2207]

Really sir this was the best video till now on race condition plz share me your linkedin❤

[@MubashshirShaikh-hs8oy]

make a video on burp suite full potentail

[@MianHizb]

Bro can you kindly just mention Race conditions in the title...thanks

[@ekkofed]

Alright

[@iq_rasco]

race condtion

[@SecureByBhavesh]

First