https://gugesay.com/blog 骨哥说事公众号首发地 zh-CN undefined (Guge) undefined (Guge) Wed, 21 Aug 2024 01:48:17 GMT https://gugesay.com/blog/idor之如何打破订阅限制 https://gugesay.com/blog/idor之如何打破订阅限制 undefined Wed, 21 Aug 2024 01:48:17 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/【2000】利用重置密码实现帐户接管 https://gugesay.com/blog/【2000】利用重置密码实现帐户接管 undefined Thu, 26 Sep 2024 07:58:09 GMT undefined (Guge) bugbountyidor白帽故事重置密码 https://gugesay.com/blog/【2000】由于缓存配置错误导致授权绕过 https://gugesay.com/blog/【2000】由于缓存配置错误导致授权绕过 undefined Thu, 22 Aug 2024 06:29:50 GMT undefined (Guge) bypassidor白帽故事 https://gugesay.com/blog/【6000】firefox-高危漏洞披露 https://gugesay.com/blog/【6000】firefox-高危漏洞披露 undefined Wed, 04 Jun 2025 01:05:18 GMT undefined (Guge) firefoxidor白帽故事 https://gugesay.com/blog/【h1最新披露】ups公司管理员身份验证绕过导致帐户 https://gugesay.com/blog/【h1最新披露】ups公司管理员身份验证绕过导致帐户 undefined Mon, 08 Jul 2024 08:54:08 GMT undefined (Guge) idorups白帽故事 https://gugesay.com/blog/【奖金5000】将任意无主手机号码添加到我的facebook账户 https://gugesay.com/blog/【奖金5000】将任意无主手机号码添加到我的facebook账户 undefined Fri, 11 Feb 2022 02:19:05 GMT undefined (Guge) bugbountyfacebookidor白帽故事 https://gugesay.com/blog/【白帽狩猎日记】一个支付逻辑漏洞，爽赚-9000-赏金 https://gugesay.com/blog/【白帽狩猎日记】一个支付逻辑漏洞，爽赚-9000-赏金 undefined Tue, 29 Apr 2025 02:44:03 GMT undefined (Guge) idorPayU白帽故事 https://gugesay.com/blog/价值-1000-美元的账户接管 https://gugesay.com/blog/价值-1000-美元的账户接管 undefined Wed, 24 Aug 2022 02:58:27 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/具有邀请功能的账户劫持思路 https://gugesay.com/blog/具有邀请功能的账户劫持思路 undefined Thu, 30 Nov 2023 02:14:12 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/利用Auth0错误配置，获得$1600赏金奖励 https://gugesay.com/blog/利用Auth0错误配置，获得$1600赏金奖励 undefined Mon, 22 Apr 2024 08:26:59 GMT undefined (Guge) APIAuth0idor白帽故事 https://gugesay.com/blog/利用未授权的密码重置实现完全帐户接管 https://gugesay.com/blog/利用未授权的密码重置实现完全帐户接管 undefined Tue, 27 May 2025 06:21:36 GMT undefined (Guge) idor白帽故事账户接管 https://gugesay.com/blog/发现关键漏洞获得-4000-赏金奖励 https://gugesay.com/blog/发现关键漏洞获得-4000-赏金奖励 undefined Wed, 11 Dec 2024 01:17:11 GMT undefined (Guge) bugbountyidorsubdomain白帽故事 https://gugesay.com/blog/另一枚价值3133-7的google-idor漏洞 https://gugesay.com/blog/另一枚价值3133-7的google-idor漏洞 undefined Wed, 29 Sep 2021 02:11:32 GMT undefined (Guge) bugbountyGoogleidor白帽故事 https://gugesay.com/blog/在阅读了220份idor漏洞报告后的心得体会 https://gugesay.com/blog/在阅读了220份idor漏洞报告后的心得体会 undefined Fri, 25 Feb 2022 06:20:41 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/如何从已披露的漏洞报告中重新发现新的漏洞 https://gugesay.com/blog/如何从已披露的漏洞报告中重新发现新的漏洞 undefined Thu, 14 Nov 2024 07:22:50 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/如何获得免费的linkedin-premium会员资格 https://gugesay.com/blog/如何获得免费的linkedin-premium会员资格 undefined Thu, 07 Sep 2023 08:15:25 GMT undefined (Guge) bugbountyidorLinkedln白帽故事 https://gugesay.com/blog/巧妙利用业务逻辑漏洞，实现google帐户接管 https://gugesay.com/blog/巧妙利用业务逻辑漏洞，实现google帐户接管 undefined Thu, 08 Aug 2024 01:41:18 GMT undefined (Guge) bugbountyGoogleidorotp白帽故事 https://gugesay.com/blog/巧妙利用本地存储漏洞，轻松登录他人直播-app-账户 https://gugesay.com/blog/巧妙利用本地存储漏洞，轻松登录他人直播-app-账户 undefined Wed, 29 May 2024 03:25:19 GMT undefined (Guge) bugbountyidorLocal Storage白帽故事 https://gugesay.com/blog/意外发现谷歌slides的越权漏洞，获得赏金-3133-70的故事 https://gugesay.com/blog/意外发现谷歌slides的越权漏洞，获得赏金-3133-70的故事 undefined Mon, 30 Dec 2024 07:07:49 GMT undefined (Guge) Googleidor白帽故事 https://gugesay.com/blog/最新h1越权漏洞披露，获得15000美元奖励 https://gugesay.com/blog/最新h1越权漏洞披露，获得15000美元奖励 undefined Mon, 29 Apr 2024 11:25:21 GMT undefined (Guge) bugbountyhackeroneidor白帽故事 https://gugesay.com/blog/演绎黑客之术：2000引爆响应操控之力 https://gugesay.com/blog/演绎黑客之术：2000引爆响应操控之力 undefined Wed, 09 Aug 2023 11:18:58 GMT undefined (Guge) idor白帽故事 https://gugesay.com/blog/绕过双因素认证至账户接管 https://gugesay.com/blog/绕过双因素认证至账户接管 undefined Mon, 22 Jan 2024 08:56:37 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/致命组合-利用idor实现csrf攻击 https://gugesay.com/blog/致命组合-利用idor实现csrf攻击 undefined Wed, 11 Jan 2023 02:03:26 GMT undefined (Guge) bugbountycsrfidor白帽故事 https://gugesay.com/blog/要来点-idor-吗？泄露-6400-万份麦当劳求职申请的漏洞 https://gugesay.com/blog/要来点-idor-吗？泄露-6400-万份麦当劳求职申请的漏洞 undefined Tue, 29 Jul 2025 01:47:16 GMT undefined (Guge) idor白帽故事麦当劳 https://gugesay.com/blog/越权拿下超级管理员权限 https://gugesay.com/blog/越权拿下超级管理员权限 undefined Tue, 05 Sep 2023 03:17:05 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/重置密码绕过的n种利用姿势 https://gugesay.com/blog/重置密码绕过的n种利用姿势 undefined Tue, 09 Apr 2024 01:38:05 GMT undefined (Guge) bugbountyidor白帽故事