How I could have hacked your medium account by phishing your FB, Twitter & Google credentials.

3 years ago 266

BOOK THIS SPACE FOR AD

ARTICLE AD

Hi There,

Renganathan here.

This write-up is about the vulnerability that I found on Medium which will allow me to hack your medium account by phishing your FB, Twitter & Google credentials.

Medium Login

YES :P

A few months ago I saw Pratik Dabhi was listed in the medium hall of fame. So I was motivated to hunt bugs on Medium. I enumerated the subdomains and stopped there because my methodologies in earlier days were very outdated and I was not good at recon.

So I thought of giving it a try again.

I started with collecting the interesting parameters with Waybackurls, ParamSpider & Gau. simultaneously I was manually exploring the site and also spider the medium with the Burp Suite.

Burp Suite Spidering

Then after some time, I was searching for the Open Redirection parameters like the below ones.

?next=?url=?target=?rurl=?dest=?destination=?redir=redirect_uri=?redirect_url=?redirect=/redirect/cgi-bin/redirect.cgi?{}/out//out??view=/login?to=?image_url=?go=?return=?returnTo=?return_to=?checkout_url=

And then I noticed an awesome parameter which was:

redirect=

I was like