Lack of rate limiting on get.uber.com leads to enumeration of promotion codes and estimation of a lower bound on the number of Uber drivers
该报告还没有中文解读。
原文摘录
摘自原文（2002 字符中的一小部分）
Invite codes are 5 alphanumeric (lower case) characters. This means there are 36 (26 + 10) possible options for each space in the invite code. In total this means there are 36^5 or 60,466,176 possible invite codes. Through enumerating through all possible invite codes, one can find the total number …
原文中的代码
For an example of each of the possible responses, see the two below links: `https://get.uber.com/invite/v1m8a` `https://get.uber.com/invite/v1m8u` A simple (but inefficient) way of exploiting this is with a simple python program like this (I have not tested the below code):
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Uber 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @ddworken · 版权归作者与 Uber 所有