In this video Ron Chan describes his process for finding critical flaws on GitLab's bug bounty program.
GitLab's bug bounty program: https://hackerone.com/gitlab
GitLab issue tracker: https://gitlab.com/gitlab-org/gitlab/...[]=HackerOne
Jobert Abma's report: https://hackerone.com/reports/301432
Ron's bypass: https://hackerone.com/reports/409395
Support us: https://www.buymeacoffee.com/edoverflow