+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: Bragging Rights (https://hackforums.net/forumdisplay.php?fid=12)
+---- Thread: I found a vulnerability on Audi's website. (/showthread.php?tid=5715024)
I found a vulnerability on Audi's website. - bar0n - Sep 10, 2017
Hey HF,
You probably never heard of me but maybe you will more in the future. I've recently starting experimenting with different wide-known vulnerabilities such as SQL and XSS.
I wanted to test my knowledge and did a Google search on websites that have a search? parameter in their url and found the american website of Audi, the car company. After a while I was able to get an alert from it.
Spoiler (Click to View)
Do you think I should report this bug?
* - RUMRUN - Sep 10, 2017
Don't worry, I'm reporting it right now
* - Nachfolger - Sep 10, 2017
I don't understand how this could compromise security of their site? Maybe someone could tell me.
Also, rip your reward, someone is gonna report it before you now.
* - Punisher - Sep 10, 2017
If you could force a password change by embedding a form into a search url then you could potentially change other members passwords by simply sending them a link. Depends on whether they use tokens to verify input.
Could be a big deal, if it was used correctly. Should probably report it, maybe you'll get a free car?
* - bar0n - Sep 10, 2017
(Sep 10, 2017 12:02 PM)Nachfolger Wrote: I don't understand how this could compromise security of their site? Maybe someone could tell me.
Also, rip your reward, someone is gonna report it before you now.
It might not even have to be with their site, because they have users what I could do is make the website redirect to a cloned version of it and when the users order a car, they will send the money to me. Phishing kind of. You could steal credentials in non-httponly cookies or make user download malware, log keystrokes etc.
The interesting thing is that user will complain to audi and not me if this attack is properly executed with good security measures taken such as socks5,vpn,rdp, useragent, mac,
(Sep 10, 2017 12:11 PM)Error Wrote: If you could force a password change by embedding a form into a search url then you could potentially change other members passwords by simply sending them a link. Depends on whether they use tokens to verify input.
Could be a big deal, if it was used correctly. Should probably report it, maybe you'll get a free car?
I'll try to accomplish that! But yeah reporting is a good idea. Will do tomorrow.
(Sep 10, 2017 12:00 PM)Ѕnipe Wrote: Don't worry, I'm reporting it right now
Good luck sniper rifle.
* - .Satellite. - Sep 10, 2017
If you find something like this, why the hell would you post on HF about it before you report it. Companies often give rewards for this stuff.
* - wit - Sep 10, 2017
I'll purchase this exploit off you.
* - .Satellite. - Sep 10, 2017
(Sep 10, 2017 12:38 PM)coder1 Wrote: I'll purchase this exploit off you.
Why would you do that when someone clearly is going to report it already. That would be a waste of money.
* - wit - Sep 10, 2017
(Sep 10, 2017 12:40 PM)SVTVN Wrote: Why would you do that when someone clearly is going to report it already. That would be a waste of money.
Didn't even see that first guy reported it already, fuck
* - falkenburry - Sep 10, 2017
(Sep 10, 2017 12:40 PM)SVTVN Wrote: Why would you do that when someone clearly is going to report it already. That would be a waste of money.To get more money. moron
* - bar0n - Sep 10, 2017
(Sep 10, 2017 12:36 PM)SVTVN Wrote: If you find something like this, why the hell would you post on HF about it before you report it. Companies often give rewards for this stuff.
Don't worry I've though about this, there are two XSS vulnerabilities on this website. The user who wants to report it will have to send Audi query to prove the bug is there. Audi will not spend 3 days like I did finding a bug that possibly doesn't even exist.
Plus user doesn't even have query of the bug.
(Sep 10, 2017 12:36 PM)SVTVN Wrote: If you find something like this, why the hell would you post on HF about it before you report it. Companies often give rewards for this stuff.
I know, but I want some presence here on HF and I have started working on HackerOne and will report bugs there but then some times it is fun just showing off some work here too.
* - PlzDecideInMyFavor - Sep 11, 2017
He probably mitm his own connection and played html popup
gg
* - HuntedCS - Sep 11, 2017
Why does your image redirect to an ad on my iPhone telling me my phone is 28.3% damaged from adult websites. 🤣
* - PlzDecideInMyFavor - Sep 11, 2017
(Sep 11, 2017 03:34 AM)HuntedCS Wrote: Why does your image redirect to an ad on my iPhone telling me my phone is 28.3% damaged from adult websites. 🤣
lol your phone is infected with adware
its a gyazo link works fine for me
* - Nebo - Sep 11, 2017
Gyazo has ads... It's a shitty service.