My Bug Bounty Write Ups (Part-1)

Bug Type: Business Logic

Get free access to the paid content with single discounted coupon

We have a target domain some.redacted.com/product

where we can apply a personalized discounted coupon and get discount.

How did I found it:

Got a coupon code from an event for one product

But I want 3more products :)

So wanted to try every possibility that I can for that I started like this

Go to the purchase page and apply the discounted couponOpen other tab and browse through other product and go to purchase page.Again apply the same discount coupon and it is going to be applied and the discounted price will be appear.Now you can buy all the products by clicking buy.

Note: This can be applied only for websites where the discounts are calculated and applied before purchasing not at the time of purchasing

Like this

You can also use burp to send all the requests at a time with the discounted requests for different products. So that server can process those in parallel and the coupon code will be applied to every product.