Browse / Legal Robot

Legal Robot

See its reports on the map

Attack surface: 51 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Legal Robot

• Authentication40
• Misconfiguration35
• Other weaknesses26
• Information Disclosure18
• Business Logic12
• Access Control4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. I cant login to my accountInformativeImproper Authentication - Generic
   12 votes
2. 2 vulns Informative
   6 votes
3. Email spoofing-fake mail from your mail domain server InformativeImproper Authentication - Generic
   6 votes
4. External links should be served in HTTPS.InformativeViolation of Secure Design Principles · low
   5 votes
5. Header Injection In app.legalrobot.comInformativeOpen Redirect
   5 votes
6. SWEET32 TLS attackInformativeCryptographic Issues - Generic
   4 votes
7. Cloudflare issue: Error 521 Ray ID: 2e7ea7f706ea4056 • 2016-09-25 12:59:55 UTC Web server is downInformativeViolation of Secure Design Principles
   4 votes
8. Add arbitrary value in reset password cookieInformativeCRLF Injection · medium
   3 votes
9. No alert in verify email address with wrong inputInformative
   3 votes
10. Information disclosureInformativeInformation Disclosure · low
    3 votes
11. Unable to change profile pictureInformativeUncontrolled Resource Consumption
    3 votes
12. Cross Site WebSocket HijackingInformativeImproper Authentication - Generic · medium
    3 votes
13. S3 ACL misconfigurationInformativeImproper Authentication - Generic · medium
    3 votes
14. Error the message with already e-mail InformativeCleartext Transmission of Sensitive Information
    2 votes
15. Registration Allows Disposable Email AddressesInformativeCryptographic Issues - Generic
    2 votes
16. Null Byte Injection in all fields of ProfileInformativeImproper Null Termination
    2 votes
17. Two accounts can be made with same passwordInformativeImproper Authentication - Generic
    1 votes
18. Name can't be numbers or emailInformativeImproper Authentication - Generic
    1 votes
19. Password Restriction On ChangeInformativeImproper Authentication - Generic · low
    1 votes
20. Weak Cryptography for PasswordsInformativeWeak Cryptography for Passwords
    1 votes
21. Information DiscloserInformativeInformation Exposure Through an Error Message
    1 votes
22. Invalid Email VerificationInformativelow
    1 votes
23. Tampering the mail id on chatboxInformative
    1 votes
24. LUCKY13 (CVE-2013-0169) effects legalrobot.comInformative
    1 votes
25. Create Api Key is not workingInformativemedium
    1 votes
26. Lack of input validation in e-mail & user name, job title, company name fieldInformativeViolation of Secure Design Principles · low
    1 votes
27. Password Policy BypassInformativeViolation of Secure Design Principles · low
    1 votes
28. The websocket traffic is not secure enoughInformativeCross-Site Request Forgery (CSRF) · medium
    1 votes
29. Email spoofing possible via Legal Robot domainInformativeViolation of Secure Design Principles
    1 votes
30. Improper error messageInformativemedium
31. Special characters are not filtered out on profile fields Informative
32. SSL BREACH attack (CVE-2013-3587)InformativeCryptographic Issues - Generic · low
33. Subdomain misconfiguration [mail.legalrobot.com]InformativeViolation of Secure Design Principles
34. CSRF IssueInformativeCross-Site Request Forgery (CSRF)
35. Non-secure requests are not automatically upgraded to HTTPSInformative