VK.com · Report #90165
CSRF в получении резервных токенов+framing , приводящие к компроментации 2fa
Validstatus
$500bounty
12upvotes
31 May 2017disclosed
Summary
Отсутствие hash на вывод списка резервных кодов.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.