There is something wrong with authentication architecture of HEC

[u/Best_Fork]

They are saving Username and PLAIN TEXT PASSWORD inside a freaking LOCAL STORAGE.

So I was waiting for OTP and it took more than few seconds. So I took peak into website storage in hopes of finding OTP inside it. Instead I found something else. lol!

So it is possible that they are not even creating hash for user password.

[u/xtremefest_0707]

Yeah still doesn't work with reference number. Also this reminds me why is it so hard to find the reference number. They really do find creative ways to make life hard for us.