Open in app
Sign inGet started
Go to the profile of Japz Divino
Japz Divino

IDOR on HackerOne Embedded Submission Form

Severity: Low (3.7) — Medium (4.4)
Weakness: Improper Access Control
Bounty: $2,500
Read more…
6 responses
Go to the profile of Japz Divino
Japz Divino

Redacted usernames disclosure in "Export as .pdf" feature

Severity: Low (3.4) Weakness: Sensitive…

Read more…
Go to the profile of Japz Divino
Japz Divino

Getting email address of any HackerOne user worth $12,500

Severity: High (7.5)
Weakness: Sensitive Information…
Read more…
1 response
Go to the profile of Japz Divino
Japz Divino

Bypass HackerOne 2FA requirement and reporter blacklist

Read more…
6 responses
Go to the profile of Japz Divino
Japz Divino

Harvesting all private invites using leave program fast-tracked invitation and security@ email forwarding feature

Read more…
2 responses
About Pinoy White HatLatest StoriesArchiveAbout MediumTermsPrivacyTeams