HexBrain

Respondly · Report #9460

OAuth Bug

Validstatus
5upvotes
30 Apr 2014disclosed

How it was found

I read the bug of @melvin and I also try to bypass this https://app.respond.ly/_oauth/twitter/?requestTokenAndRedirect=https://hackerone.com

so I made a bypassing tehcnique but didnt work https://app.respond.ly/_oauth/twitter/?requestTokenAndRedirect=//hackerone.com

But I think I found a bug This is the Screen shot: http://prntscr.com/3cu58e

When a user authorizes their twitter to connect with the URL above they will encounter that error.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original