Congrats, on the findng. I supposed this has to be reported to the freshworks bug bounty program

there was a missing server-side validation anyone with a burp proxy could capture and manipulate the request and do the takeover.
HOW I hacked thousand of subdomains
956
11
MoSec
Renganathan
·Follow
Jan 27, 2022
--
Congrats, on the findng. I supposed this has to be reported to the freshworks bug bounty program
--
--
Written by Renganathan841 Followers
·50 Following
20 | Building R Protocols | Ethical Hacker👨‍💻 | Secured Google, Apple, Amazon, United Nations, LinkedIn and 45+ companies
Responses (1)
Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams