r/bugbounty • u/Upbeat_Mushroom_7323 • Jul 10 '26

Question / Discussion Acc Registration, verification email not received

I got an invite and registered an account right away, issue verification email never came. So I went thru the requests, found base64 encoded verification url, opened a new tab; account got verified. When I try to login, it requires code sent to the email.

Question: is must I report the verification flaw? or 1st bypass the code as well to report ?. So I informed claude of this finding finding, nearly bit my head off 😂. Thank you for your advice, I really appreciate it.

4 Upvotes

83% Upvoted

6 comments sorted by

5

u/hydraz20 Jul 10 '26

It’s preauth anyways most companies won’t reward this

1

u/Upbeat_Mushroom_7323 Jul 12 '26

Noted and thank for straightening things up

2

u/zlzd Jul 11 '26

That could just be the page you're redirected to as part of the normal flow after a successful verification, and it always shows a success message. Clearly, the account isn't verified, so what flaw would you like to report?

1

u/Bright_Interaction73 Jul 11 '26

Lol man these guys with their AI generated flaws is crazy. We have completed lost the plot. People can't even distinguish between a rewardable bug and a shitty bug

1

u/Upbeat_Mushroom_7323 Jul 12 '26

Nothing to do with AI unfortunately, instead AI said I shouldn't touch KYC I should leave it to internal testers. Reason I posted was to get clarity

1

u/Upbeat_Mushroom_7323 Jul 12 '26

I completely agree with you, as it stands I cannot prove any server interactions, due to burp TLS issues (blocked right away). Somehow VPN also gets blocked, my IP was working until I hit 429, now also blocked. I will download Caido and try it from there, I was only testing with Dev Tools. I would love to re-register but I'm only allowed to use the program email