$5K Misconfigured Reset password that leads to Account Takeover (No user Interaction ATO)

Bypassing Captcha !

How I Found SQLI on Dutch Government Website in 20 Minutes