Tags authentication1 broken access control1 bug-bounty2 burp suite1 jwt1 otp1 rate limiting1 recon1 reflected-xss1 ssr1 ssrf1 web-security1 xss2