HexBrain

HackerOne · Report #59375

Homograph attack

Validstatus
17upvotes
9 May 2015disclosed

How it was found

Hi,

I would like to report an incomplete fix of #58612 is. In short, backslash is not taken in consideration.

PoC

[http://ebay.com](https:\//ebаy.com)

http://ebay.com

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original