HexBrain

VK.com · Report #64731

Able to intercept app Traffic after choosing up the Secured Connection using SSL (HTTPS)

Validstatus
$100bounty
4upvotes
3 Mar 2017disclosed

How it was found

Install the app Login with Valid credentials Settings - Choose Secured connection (HTTPS) Close the app Set the proxy and Open the app verify that Connection isn't Secured and able to intercept (PFA POC)

Expected Result : Secured layer & SSL PINING should be applied successfully.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original