$800 Authentication Bypass Bug Bounty POC 2023 | Broken Authentication & Session Management | P1

[@AllGlidezzz]

This channel has tremendous potential 👍

[@abhishekmorla1]

thanks you the best

[@RootForce]

Yessir!! Good stuff bro, I’m a Red Team operator but I would like to get into web apps more often for bug bounty! You make it look fun 💪

[@nmanoj-qs2no]

which bug bounty platform are u using

[@abhishekmorla1]

why would i tell you ? just kidding thats private normal people cant get access to it

[@esam71]

Sir,how do i know that if there is this bug or not?
Plz,inform me.

[@abhishekmorla1]

join the channel

[@dasrdomingo]

What software are you using?

[@abhishekmorla1]

Burp suite

[@Thomsh-q6o]

Where did you get that program 😢

[@hasharmujahid1288]

it's called burpsuite

[@abhishekmorla1]

i share program here
th-cam.com/channels/9IAh1JN4lhSVz193GvZVZg.htmljoin

[@mohmino4532]

where did u get that link bro im confused 😮

[@abhishekmorla1]

which link ?

[@mohmino4532]

this one bro --> e790-202-168-142-86-142.ngrok-free could u explain it how did u get it ?

[@abhinavbansal9396]

​@@abhishekmorla1he is asking about login page link I guess or that password.htm page

[@RootForce]

That’s a subdomain he enumerated, he’s just recording his PoC using burp suite to show the host has broken authentication

[@mohmino4532]

@@RootForce ah okay i got it bro thx so much ❤❤

[@rhidayahh]

Why do you use ngrok?

[@abhishekmorla1]

to get reverse connection over the internet

[@Pecinta_wanita11]

How much is this cve?

[@abhishekmorla1]

you mean price?

[@Pecinta_wanita11]

Sorry my English not to good.. what CVE is this?

[@sheikhabid7861]

Where you find password.htm bro

[@abhishekmorla1]

burp suite scanner

[@sheikhabid7861]

@@abhishekmorla1 thanks

[@TeamSQL]

How did you got the endpoint?

[@abhishekmorla1]

maybe you can get it by burp scanner

[@RajuHa-g3m]

Nice trick brother

[@احمدفرحان-ت7ك]

🎉🎉👍👍👍👍👍