Hey UserID x, what’s your secret token? Broken API enables me to leak/modify any users personal information

--

--

--

UK WebApp Security Researcher. Creator of BugBountyHunter— designed to help people learn and get involved with hacking. zseano.com & bugbountyhunter.com

Love podcasts or audiobooks? Learn on the go with our new app.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Sean (zseano)

Sean (zseano)

UK WebApp Security Researcher. Creator of BugBountyHunter— designed to help people learn and get involved with hacking. zseano.com & bugbountyhunter.com

More from Medium

DAPP Demo Digital Signature Application part-1

Ubuntu Linux Architecture

Application Security #3: How to find SSL Issues for your assets

Cording with Node.js