€50 bounty — Long String DOS Attack Bug and POC Steps

Read For Free — https://nexguardians.com/long-string-dos-attack-bug-and-poc-steps/

Check out my previous articles on P4 bugs — Part 1 , Part 2, Part 3, Part 4, Part 5, Part 6

Hi everyone, I am socalledhacker, i am a security researcher , penetration tester, certified ethical hacker and a web3 noob. In past months, I have discover lots of bugs but in today’s article we are going to discuss about low hanging fruits or P4 vuln’s as they are very easy to find and also present in almost every website. So let’s start with our first vulnerability.

Recently, I got a bounty for a bug which is DOS, this is the first time I got bounty for DOS bug usually companies mark DOS as out of scope. I found this bug in a self hosted program so due to program policy i can’t disclose the program name but let’s say the program name is example.com

Now while testing different features and functions i got nothing but my instincts says that there is a bug in this program so i keep pushing the boundaries usually I don’t look for bugs like DOS but i thought let’s give it a shot.

So there is a feature in the site, which is like password protect our shop, by this function we can put password on our shop which will make…