VulnBank: Using Exposed API Docs and Weak Reset Logic to gain Superadmin Access

Exposed API endpoints are often the starting point for dangerous information leaks. In this write-up, I will demonstrate how a weak…