HexBrain

Panther Labs · Report #1607429

Twitter Account hijack through broken link in https://runpanther.io

Validstatus
lowseverity
18upvotes
28 Jul 2022disclosed

How it was found

Summary:

A link(https://twitter.com/runpanther_) in https://runpanther.io was broken and anyone could create that account which leads to account impersonate

Steps To Reproduce:

1.Go to https://runpanther.io 2.Scroll down to bottom there you can see that twitter icon. 3.Click on that icon, you will redirected to twitter account which i have been hijacked 4.Anyone could claim this username and broken link could be hijacked.

Supporting Material/References:

Similar report that was reported previously in panther_lab https://hackerone.com/reports/1117079

Impact

Since the link can be hijacked so any attacker can claim the link and make fake twitter profile of panther labs and can do scam with them.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original