Look for:
POST /send-otp or POST /verify-phone
Test by intercepting the API response and checking for the OTP in hidden fields.
For more tips Telegram channel: t.me/bugbountyusa
#BugBounty #OTPLeak #AccountTakeover #InfoDisclosure
Look for:
POST /send-otp or POST /verify-phone
Test by intercepting the API response and checking for the OTP in hidden fields.
For more tips Telegram channel: t.me/bugbountyusa
#BugBounty #OTPLeak #AccountTakeover #InfoDisclosure