Bug Bounty

Merge /Testing_for_Vertical_Bypassing_Authorization_Schema_WSTG-AUTHZ-00X.md into 4-Web_Application_Security_Testing/05-Authorization_Testing/03-Testing_for_Privilege_Escalation.md

Is subdomains hosted at discourse is vulnerable to takeover or not?

Here is a simple template for the default administration password on ZyXEL devices. I tested it only on two different ZyXEL devices, the authentication flow and the resulting page may differ on other models, so it needs more tests.

id: zyxel-default-password

info:
  name: ZyXEL Default Password
  author: wtzu
  severity: high
  tags: zyxel

requests:
  - raw:
      - |