ibruteforce has reached Level 4 with 75+ unique vulnerabilities discovered and they have proven to us that they understand web application vulnerabilities and how to discover them. If you run a bug bounty/vulnerability disclosure program and you are looking for an active, professional researcher, we recommend considering this user

ibruteforce

Rank #65 — Level 4

82
unique bugs discovered
105 hours, 53 minutes and 10 seconds active hacking time

84
reports accepted
98 Accuracy

Vulnerability Types Found

Bug Submissions & total bug count

Hackevent (FirstBlood) Activity

Below you can find disclosed reports from our Hackevents which are events we host for our members to win rewards. You can find more information here.

Report Title	Event ID	Severity	Vulnerability Type
Leak arbitrary users appointment details Manage/delete them	FirstBlood v1	High	`Insecure direct object reference`
Cancel arbitrary reports through 'aptid' parameter	FirstBlood v1	High	`Insecure direct object reference`
IDOR - Restricted doctor can view all the details of the patient such as contact details etc.	FirstBlood v1	CRITICAL	`Auth issues`
IDOR - Restricted user can view the details of hospital user.	FirstBlood v1	CRITICAL	`Application/Business Logic`
Potentially takeover other doctors account?	FirstBlood v1	High	`Auth issues`

BugBountyHunter