achievement_unlocked
@diego.vera-dossier ha resuelto
0-click-ATO — Account Takeover via OTP Brute Force + Email Case-Sensitivity Bypass
BBLABS.ESLab Resuelto
Insane$600
// achievement_unlocked
0-click-ATO — Account Takeover via OTP Brute Force + Email Case-Sensitivity Bypass
API Abuse
mar 2026
D
solved_by@diego.vera-dossierMiembro desde mar 2026
bblabs.es// real bug bounty practice
dificultad
Insane
posición
#3
completados
12
sobre_el_hacker
El track record de @diego.vera-dossier
labs resueltos
7
flags capturadas
4
// últimos labs resueltos
Media$750
Stored XSS via SVG File Upload
abr 2026
Insane$600
0-click-ATO — Account Takeover via OTP Brute Force + Email Case-Sensitivity Bypass
mar 2026
MediaVDP
6 Progressive DOM XSS Challenges
abr 2026
DifícilVDP
CSRF que Escala Self-XSS a Stored XSS
abr 2026
DifícilVDP
Blind SSRF with Internal Headers
abr 2026
MediaVDP
Subdomain Takeover via Dangling CNAME
mar 2026