$ grep -l "#otp-bypass" ~/blog/*
#otp-bypass
1 post · all posts
My First Bug | Account takeover through OTP bypass
My first ever bug and write-up: an OTP field with no rate limiting let me brute-force the code and take over an account on my ISP's website.