How I Bypassed a Billion-Dollar Fintech’s MFA with a Single Content-Type Twist (opens in new tab)

We’ve all seen the classic bug bounty write-ups. “How I found a $10,000 Remote Code Execution by staring at a base64 string for 72 hours.”…