Bug-bounty proof of concept · Toyota France preferred-dealer storage poisoning → SSO token theft.
Usage: append ?id=<webhook.site-uuid>. Deliberately unbranded; the only external service contacted is the researcher's own webhook.site collector.