How I got Apple Hall Of Fame !

  1. Subdomain Enumeration
  2. Probing for Live Assets
  3. Active & Passive reconnaissance
Passive recon — gau
Response — activate.apple.com
Modified Page — Text injection
Asked for details
  1. Before reporting the issue, When I analyzed source code of the webpage.
  2. I came across a JavaScript file :
  3. https://activate.apple.com/success.4d4adb99f76951f234a1.js
  4. After the fix, they removed the parameter “appleID
Before vs After
Response
Hall of Fame

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store