In an Indian website i found IDOR which can be used to purchase Items for free.I want to sell it where i can do it
I cannot use that Vulnerability because Im in collage and I lack resource to get fake no. and address to resell it. (also don't want legal problems)
Max price item is a Laptop with price around 150$. As long as person does not purchase in bulk there team will not notice.(I did total purchase of around 50$ till now)
I wanted to report but they don't have bug bounty program so I might get in legal trouble
It also leaks phone no. of its users (All Users are Indian). users are 100 million+.(Not reveling exact no. of users).
may be there tech team don't give **** about security as it targets are students.
This is my first time trying to sell something like this so Im not sure about price. so you can also suggest price