Business logic doesn't get you shell about passwordresetdashboard

[Muelsy]

@someguy69 I’m pretty sure you have a presentation last year on an auth bypass that resulted in a shell. Are auth bypasses business logic bypasses 🤔🤔🤔🤔

[someguy69]

auth bypasses don't get you shell

[someguy69]

I stand corrected

if bypassauth(request) {
   RCE()
}