$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: TeamPulse collaboration dashboard with OAuth2 CloudID integration and bug bounty program. Reflected XSS in OAuth callback error_description parameter. Solution: Crafted XSS payload to steal admin cookies via in-band exfiltration using application's own notes API, bypassing external webhook restrictions.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar