Skip to content
Hacking the World Poker Tour: Inside ClubWPT Gold’s Back Office
samcurry.net | blog | #bug-bounty | #access-control | #authentication-bypass | #web-security | #admin-panel | #clubwpt
Summary
Sam Curry recounts breaching ClubWPT Gold's back office: a stray Chinese dev domain in the poker site's JavaScript led to an admin portal with broken auth exposing IDs, passports and transactions.
- Published
- Collected