How I got access to an IDOR that exposed PII for 6.4 million users

$500 Bounty - How a Logic Flaw Allowed Silent Logins in a Financial Application

Full-Blown SSRF to Gain Access to Millions of Users Records and Multiple Internal Panels