How I Found a Critical Password Reset Bug in the BB program(and Got $4,000)

Privilege Escalation via Impersonation Features feature

How I Got AWS Secret Keys from Exposed Variables in JS File