Browse / Legal Robot

Legal Robot

See its reports on the map

Attack surface: 51 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Legal Robot

• Authentication40
• Misconfiguration35
• Other weaknesses26
• Information Disclosure18
• Business Logic12
• Access Control4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. AWS hosting bucket for Legal Robots set as public browse and list contents: s3://legalrobotN/AInformation Disclosure
   21 votes
2. Password Reset page Session FixationN/ASession Fixation · medium
   7 votes
3. sql injection vulnerablity foundN/ASQL Injection
   5 votes
4. Bypass email verification when register new accountN/AImproper Access Control - Generic
   4 votes
5. Amazon Bucket Accessible (http://legalrobot.s3.amazonaws.com/)N/AInformation Disclosure
   4 votes
6. Password Complexity N/AImproper Authentication - Generic
   3 votes
7. Chat exposed using cookieN/AReliance on Cookies without Validation and Integrity Checking in a Security Decision
   1 votes
8. XSS on app.legalrobot.comN/ACross-Site Request Forgery (CSRF)
   1 votes
9. https://www.legalrobot.com/N/AInformation Disclosure
   1 votes
10. clickjacking at http://mailboxes.legalrobot-uat.com/N/AUI Redressing (Clickjacking)
    1 votes
11. No DMARC Record in legalrobot-uat.comN/AMisconfiguration
    1 votes