Youssef Eid
pentestinghere/3id
Published
27 Aug 2026
Published on hamzadzworm.medium.com
Sign in to open the link
External writeup by Hamzadzworm (abdelkader mouaz): an account takeover on a passwordless SaaS, chaining an email-uniqueness bypass (a trailing space) with a session-invalidation gap that spared business-mode sessions. The basis for the Nimbus Workspaces scenario.