Panther Labs · Report #1607429
Twitter Account hijack through broken link in https://runpanther.io
How it was found
Summary:
A link(https://twitter.com/runpanther_) in https://runpanther.io was broken and anyone could create that account which leads to account impersonate
Steps To Reproduce:
1.Go to https://runpanther.io 2.Scroll down to bottom there you can see that twitter icon. 3.Click on that icon, you will redirected to twitter account which i have been hijacked 4.Anyone could claim this username and broken link could be hijacked.
Supporting Material/References:
Similar report that was reported previously in panther_lab https://hackerone.com/reports/1117079
Impact
Since the link can be hijacked so any attacker can claim the link and make fake twitter profile of panther labs and can do scam with them.