[xQQ]

Cheers,
I just found a security issue in http://www.projectmessiah.com/ where you can buy the 3D animation software Messiah: Studio. You can manipulate the http parameters to pay just as much as you like.

Head to the shop and click "Buy", then just intercept the request with Burpsuit or Tampadata (I am not going to explain this).
Spoiler (Click to View)



Change the value 299.00 to anything you like and you'll get instantly redirected to a paypal basket.
Spoiler (Click to View)


It's german but you'll get the idea.

Nothing special, just felt like sharing this. Make sure to stay anonymously if you're actually going to buy.

[Naww]

Cheers,
I just found a security issue in http://www.projectmessiah.com/ where you can buy the 3D animation software Messiah: Studio. You can manipulate the http parameters to pay just as much as you like.

Head to the shop and click "Buy", then just intercept the request with Burpsuit or Tampadata (I am not going to explain this).
Spoiler (Click to View)



Change the value 299.00 to anything you like and you'll get instantly redirected to a paypal basket.
Spoiler (Click to View)


It's german but you'll get the idea.

Nothing special, just felt like sharing this. Make sure to stay anonymously if you're actually going to buy.

Nice find man, mind tellin how u found this?
Did u use a program, if u did plz me the name x)
THnx

[mangdiabloz]

Nice find man, mind tellin how u found this?
Did u use a program, if u did plz me the name x)
THnx

"Head to the shop and click "Buy", then just intercept the request with Burpsuit or Tampadata (I am not going to explain this). "

He did mention it. You can also use charles debugging proxy and using breakpoint to intercept request and respond.

[xQQ]

Nice find man, mind tellin how u found this?
Did u use a program, if u did plz me the name x)
THnx

Do you mean how I found the website? I used[/code] google dorks for shopping sites.