Uncovering a Command Injection, $2400 Bounty

Hello, in this write-up I will explain how I found four P1 and two P2 bugs and showed multiple attack scenarios. Recon Usually, the first thing I do to get started on wide-scope programs is to find the ASNs and CIDRs of the company, through which I c...