“I Won’t Let Your Future Customers Register” — Hunting an Email Verification Bug Through Recon (opens in new tab)

A bug bounty story about how a routine reconnaissance exercise led to discovering an insecure email change workflow.