A tale of a “Forget Username”
anasTo The Point Version: I hacked the Forgot Username functionality by adding an extra email parameter in the POST request, and the application sent me all the usernames attached to…
First Bounty!
To The Point Version: I found my first bug by doing recursive directory bruteforcing on target and found PHP info page after 3 directories. Whole story: We always remember the…