[H1-2006 2020] Bounty Pay CTF challenge
访问控制 / 访问控制缺陷（通用） / #895798
该报告还没有中文解读。
原文摘录
摘自原文（25213 字符中的一小部分）
Hi there! This is my H1-2006 CTF writeup submission. First of all, thanks for the great challenge! This was my first H1 CTF that I played. I really enjoyed doing it and I learned new things solving this challenge. In my case, it was the demonstration that I have decent knowledge about security :D
原文中的代码
$ for subodomain in $(cat subdomains.txt); do ffuf -u "https://${subodomain}/FUZZ" -w common.txt -mc 200,301; done默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 h1-ctf 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @0xfd · 版权归作者与 h1-ctf 所有