跳到内容
onsuggest
登录
文章 en

Taimi: Finding Everyone's Private Photos Was Easy, But So Was Getting Paid

来源: bobdahacker blog ·

How I found critical IDOR vulnerabilities in Taimi that exposed "expiring" videos, private photos through a bizarre location feature, and allowed fake system messages - and how they actually handled it right with a $10k bounty.

键盘快捷键

上一条发现
←P
下一条发现
→N
喜欢
L
不适合我
X
保存
S
显示此帮助
?
关闭
Esc

快捷键在发现页面上有效。