achievement_unlocked
@maxiolivera ha resuelto
0-click-ATO — Account Takeover via OTP Brute Force + Email Case-Sensitivity Bypass
BBLABS.ESLab Solved
Insane$600
// achievement_unlocked
0-click-ATO — Account Takeover via OTP Brute Force + Email Case-Sensitivity Bypass
API Abuse
May 2026
MA
solved_by@maxioliveraMember since Apr 2026
bblabs.es// real bug bounty practice
dificultad
Insane
posición
#5
completados
17
sobre_el_hacker
El track record de @maxiolivera
labs resueltos
10
flags capturadas
9
// últimos labs resueltos
Insane$1,200
Stored XSS to Domain Takeover
may 2026
Insane$600
0-click-ATO — Account Takeover via OTP Brute Force + Email Case-Sensitivity Bypass
may 2026
Insane$600
DOM XSS via postMessage → eval (cross-origin admin pwn)
may 2026
Difícil$500
IDOR via Predictable Checkout IDs
may 2026
Difícil$50
IDOR + CORS Chain Attack
may 2026
DifícilVDP
Web Cache Deception & BAC in /uploads
may 2026