“I Won’t Let Your Future Customers Register” — Hunting an Email Verification Bug Through Recon

A bug bounty story about how a routine reconnaissance exercise led to discovering an insecure email change workflow.