Crashing your LinkedIn app with a connection request.

3 years ago 223

BOOK THIS SPACE FOR AD

ARTICLE AD

Hi There,

Renganathan here.

This write-up is about an accidental bug that I found on LinkedIn.

Connect with me on LinkedIn, or I’ll hack you!

So that was the early time when I joined LinkedIn and I didn’t know much about the working functionalities. I’ve used only Instagram in my life *_*

I was trying to send a connection request to a person and I noticed I can give a personalized note with the requests. I added a message with around 650 characters approximately.

But LinkedIn allows, only 300 characters. So As a noob, what I did is, I used inspect element to change the maxlength=”300" value. And then I sent the request.

BOOM!

It didn’t work, what else did you expect :/

Then I thought of using Burp Suite to add more content, which is more than 300 characters in the POST request. Something like below

“message”:{“values”:[{“value”:”my comment”}]}

And I clicked forward, and the connection request was sent successfully. Then I went to mynetwork/invitation-manager/sent/ to see the sent connection requests.

BOOM!

This worked :)

POC

So, the characters It sent was more than 300 obviously and it was sent successfully.

So, Reporting this as a business logic error won’t be good. So I tried adding a very huge request to my test account with a kind of hundred thousand characters.

I opened it from my android phone and the app was crashed.

I was like “IS THIS A DOS? VULNERABILITY”