HexBrain

Chaturbate · Report #418151

No rate limiting in starting up a bot.

Validstatus
lowseverity
15upvotes
9 Oct 2018disclosed

How it was found

hi security team, I was able to start up a bot numerous times.

  1. Goto https://chaturbate.com/b/username
  2. Choose a bot and capture the request.
  3. Send to intruder and repeat the step numerous times.
  4. I did this 196times 5.I was able to activate a bot numerous times
  5. My room was flooded with message which i will show your in the screenshot below. Thanks.

Impact

Bruteforcing.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original