Hack Forums
[Method] Github EDU Re-redeem exploit - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Method] Github EDU Re-redeem exploit (/showthread.php?tid=6236026)



[Method] Github EDU Re-redeem exploit - sticksdev - Mar 12, 2023

Heyo HF! Just found something super interesting when it comes to GitHub education and offers
and checking if you have redeemed them. Before I show you, here's what the bug/exploit is in a nutshell:

Most github edu offers link to a vendor site. It's up to that vendor to do the checking, and 9 times out of 10,
they always check the email, not your github account ID. So I was like what the heck... and it worked.

So, without further ado, here's how to do it.

1. Confirm your offer uses email checking. If it uses GitHub ID checking, it will not work!
2. Find the offer name, as seen below:

[Image: veBF87LJC]

3. Go into your account settings, and the oauth page

[Image: 1rYEKRuWZ]

[Image: 58EFMBIB7]

4. On the ouath page, click on the 3 dots next to the application name

[Image: YRBXrxY4_]

5. And click revoke

[Image: HvBZD2p0q]

And your done :D. Simply re-auth using the offer page on the GitHub education portal, and you are all set!
Let me know if you have any questions


RE: [Method] Github EDU Re-redeem exploit - Senno - Mar 12, 2023

Hey, bro.

Thanks for the tuts. I got many Github edu accs. will try this method for re-redeem my offers.


RE: [Method] Github EDU Re-redeem exploit - ╚{ RadioActive Hack }╝ - Mar 12, 2023

It might be because I've been awake for 30 hours or that I'm just stupid, but for the life of me I can't figure out how you got that first screen.


RE: [Method] Github EDU Re-redeem exploit - sticksdev - Mar 13, 2023

(Mar 12, 2023 07:23 PM)╚{ RadioActive Hack }╝ Wrote:  It might be because I've been awake for 30 hours or that I'm just stupid, but for the life of me I can't figure out how you got that first screen.

No worries, click on your account profile picture and then "Settings"

(Mar 12, 2023 04:48 PM)Senno Wrote:  Hey, bro.

Thanks for the tuts. I got many Github edu accs. will try this method for re-redeem my offers.

Best of luck.