Direct Access Of Employee’s Account At Hackerone’s Target ❗💻

Jun 24, 2024 3 min read Utsavpari Gosai

Hello Hackers,

I hope you all found well so Today i was telling you a story about how i found company’s offishial email and password in plain text at hacketone but i could no disclose the name of company so we are called it as target.com so lets get started



So here is a tool https://www.proxynova.com/tools/comb 🤖 In february of 2021, the largist dataset of leaked credentils (emails, usernames, and passwords) named COMB (Combination Of Many Breaches) was leaked to the public. It was the largist data leak of all time, containing over 3.2 billion credentils combined from various other data breaches over the years from services such as Netflix, LinkedIn and many others. The purpose of this tool is to make that massive dataset of leaked usernames and passwords easily searchble, and to encourage better security practices by giving people an ability to check if their credentils were leaked and thus exposed to hackers.

So i just search here @mytarget.com so i found many emails and passwords so to increase the impact i visit my target website’s login page and try one email and password one by one and guess what boom💥 i found 3 to 4 valid emails and passwords wich gave me direct access of company’s employee account without anything and some accounts are blocked so i just exited and create report and and PoC’s and submit at hackerone



i have got many N/A and some medium and high impact bug closed still it is valid but companys not accepted them i dont know why well so i think this was the critical i got and accepted so i reported and wait but so sad to says company gave me this reply😔



No worry this is not the end so i feel some sadness because it is critical one i think but its not companys policy and priority so i moved on Let's See What Is The Wish Of Real Owner Of Pinak i just share with all because you gain some new information and you found this in any target with tell change his password or apply 2FA as mitigation 🔒

So i hope you all find some new information with this article and this is the main motive of my writing articale so thank you for reading see you soon with something new like today

Thank You,
MR.X FACTOR

🔗 Handles:

← Back To Homepage