---
id: 4149
title: "‘I found a CSRF and could deploy code through an enterprise’s App Store account’: yassine_eal’s Bug Bounty story"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/community/csrf-app-store-yassine-eal"
published_at: "2026-06-15 14:42"
tags: ["bug-bounty", "web-security", "app-store", "interview", "csrf", "hunter-story"]
phying_url: "https://phying.com/item/4149"
lang: en
---

# ‘I found a CSRF and could deploy code through an enterprise’s App Store account’: yassine_eal’s Bug Bounty story

## Summary

Bug hunter yassine_eal explains how he picks targets by available time and recalls his proudest find — a CSRF that gave admin control over an enterprise's app-store code deployments.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-06-15 14:42
- **Original:** https://www.yeswehack.com/community/csrf-app-store-yassine-eal
- **Phying News:** https://phying.com/item/4149