[h1-2006 CTF] Payments for May have been processed!

Disclosed: 2020-06-19 21:47:57 By vakzz To h1-ctf
Critical
Vulnerability Details
Hi :) First off thanks for a great CTF! It had its ups and downs (mainly due to my mistakes) but here is the final flag: `^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$` My write up can be found at https://devcraft.io/bountypay-h1-2006-ctf.html (unpublished) detailing the process, tools, and mistakes I made along the way. Cheers, Will ## Impact * Password disclosure and multiple 2FA bypasses allowing an attacker to process payments
Actions
View on HackerOne
Report Stats
  • Report ID: 894165
  • State: Closed
  • Substate: resolved
  • Upvotes: 4
Share this report