Home Top Ad

Responsive Ads Here

From Github Recon To Account Takeover

Share:
Hi everyone , after a long time I am doing a write-up on GitHub recon which leads to full account takeover . Few days ago I got a private invite where the in-scope target is only the mobile app.

As its a private program we will take it as Example App . So I gone through all endpoint and functionality of the  application , i didn't find anything critical. So I thought to give a try to their GitHub.

If you want to learn how to do GitHub recon there is a detailed tutorial by Th3G3nt3lman


So i started my search with the keyword passwd , i got 3-5 result 

after going through all file i got a valid password in file called config.properties


 So that app using OTP based authentication and i got the credential for the third party service , which they are using for the SMS.

Using those credential I logged into the SMS provider portal , there is a section call SMS delivery where all SMS delivery report are  stored along with the Phone number and the text sent to that number.



So now i have all registered users mobile number and OTP delivery report along with OTP


So i just request for OTP and from the delivery report got the valid OTP and loggedin to any user's account 😎


 Hope you guys like it , share your feedback in commen. 




 

22 comments

Sonali said...

How you found that password🤔..
Don't know the tricks,but its intresting...

THE ONLY TRUE HACKER IN THE WORLD ® said...

INSTEAD OF GETTING A LOAN,, I GOT SOMETHING NEW
Get $5,500 USD every day, for six months!

See how it works
Do you know you can hack into any ATM machine with a hacked ATM card??
Make up you mind before applying, straight deal...

Order for a blank ATM card now and get millions within a week!: contact us
via email address::{Universalcardshackers@gmail.com}

We have specially programmed ATM cards that can be use to hack ATM
machines, the ATM cards can be used to withdraw at the ATM or swipe, at
stores and POS. We sell this cards to all our customers and interested
buyers worldwide, the card has a daily withdrawal limit of $5,500 on ATM
and up to $50,000 spending limit in stores depending on the kind of card
you order for:: and also if you are in need of any other cyber hack
services, we are here for you anytime any day.

Here is our price lists for the ATM CARDS:

Cards that withdraw $5,500 per day costs $200 USD
Cards that withdraw $10,000 per day costs $850 USD
Cards that withdraw $35,000 per day costs $2,200 USD
Cards that withdraw $50,000 per day costs $5,500 USD
Cards that withdraw $100,000 per day costs $8,500 USD

make up your mind before applying, straight deal!!!

The price include shipping fees and charges, order now: contact us via
email address:: {Universalcardshackers@gmail.com}

Gary said...
This comment has been removed by a blog administrator.
URGENT LOAN OFFER WHATSAPP +918929509036 said...

Are you tired of seeking loans and Mortgages,have you been turned down constantly By your banks and other financial trial will convince you.What are your Financial needs?Do you need a business loan?Do you need a personal loan?Do you want to buy a car?Do you want to refinance?Do you need a mortgage loan?Do you need a huge capital to start off your business proposal or expansion? Have you lost hope and you think there is no way out, and your financial burdens still persists? Contact us (fastloanoffer34@gmail.com) Your Name:............... Your Country:............... Your Occupation:............... Loan Amount Needed:............... Loan Duration............... Monthly Income:............... Your Telephone Number:..................... Business Plan/Use Of Your Loan:............... Contact Us At : fastloanoffer34@gmail.com Phone number :+918929509036

clem said...

Hello Everybody,
My name is Ahmad Asnul Brunei, I contacted Mr. Alpha Loan Firm for a business loan amount of $250,000, Then i was told about the step of approving my requested loan amount, after taking the risk again because i was so much desperate of setting up a business to my greatest surprise, the loan amount was credited to my bank account within 24 banking hours without any stress of getting my loan. I was surprise because i was first fall a victim of scam! If you are interested of securing any loan amount & you are located in any country, I'll advise you can contact Mr. Alpha Loan Firm via Email call or add us on what's app+91-9818603391 Contact Us At : clemalphafinance@gmail.com

Blogger said...

As stated by Stanford Medical, It is really the ONLY reason this country's women get to live 10 years more and weigh 19 KG lighter than we do.

(Just so you know, it is not related to genetics or some secret diet and EVERYTHING related to "HOW" they are eating.)

BTW, What I said is "HOW", not "WHAT"...

CLICK this link to discover if this easy test can help you unlock your true weight loss potential

Shron Prysock said...

BEST WAY TO HAVE GOOD AMOUNT TO START A GOOD BUSINESS or TO START LIVING A GOOD LIFE….. Hack and take money directly from any ATM Machine Vault with the use of ATM Programmed Card which runs in automatic mode. email (williamshackers@hotmail.com) or WhatsApp +27730051607. for how to get it and its cost . ………. EXPLANATION OF HOW THESE CARD WORKS………. You just slot in these card into any ATM Machine and it will automatically bring up a MENU of 1st VAULT $200, $300, $400, $1,000, 2nd VAULT $2000, $3000, $4000, $5,000, RE-PROGRAMMED, EXIT, CANCEL. Just click on either of the VAULTS, and it will take you to another SUB-MENU of ALL, OTHERS, EXIT, CANCEL. Just click on others and type in the amount you wish to withdraw from the ATM and you have it cashed instantly… Done. ***NOTE: DON’T EVER MAKE THE MISTAKE OF CLICKING THE “ALL” OPTION. BECAUSE IT WILL TAKE OUT ALL THE AMOUNT OF THE SELECTED VAULT. email (williamshackers@hotmail.com) or WhatsApp +27730051607.

Fixit said...

Hello all
am looking few years that some guys comes into the market
they called themselves hacker, carder or spammer they rip the
peoples with different ways and it’s a badly impact to real hacker
now situation is that peoples doesn’t believe that real hackers and carder scammer exists.
Anyone want to make deal with me any type am available but first
I‘ll show the proof that am real then make a deal like

Available Services

..Wire Bank Transfer all over the world

..Western Union Transfer all over the world

..Credit Cards (USA, UK, AUS, CAN, NZ)

..School Grade upgrade / remove Records

..Spamming Tool

..keyloggers / rats

..Social Media recovery

.. Teaching Hacking / spamming / carding (1/2 hours course)

discount for re-seller

Contact: 24/7

fixitrogers@gmail.com

Hussain Al-Saidely said...

Borrow money here today at 3% interest rate. Sawda Capital Finance offers all kinds of financial services of all sizes ranging from individuals, companies, and traders globally./Our services are 100% guaranteed and risk-free.

We build just the right financing for each client, with simple paperwork, quick approvals, and flexible payment schedules. For further details, Kindly contact us via email At sawda.finance@gmail.com

Intermediaries/Consultants/Brokers are welcome to bring their clients and are 100% protected. In complete confidence, we will work together for the benefits of all parties involved, Looking forward to rendering the best of our services to all esteemed clientele globally.

Mohamed said...


DR. ALPHA FINANCIAL service, we offer loan at 3% interest rate, do you have any financial crisis in your business? do You need a business loan at low interest if your answer is yes, I have an offer that u can't refuse,we will pay the loan within a day, I can help you with the urgent loan you need.contact us at with the below information's to proceed further. Information Needed: Name Address State Country Amount Needed as loan Loan Duration/Term. mobile number Respond contact us via Email clemalphafinance@gmail.com Whatsapp +91-9818603391

Mohamed said...


DR. ALPHA FINANCIAL service, we offer loan at 3% interest rate, do you have any financial crisis in your business? do You need a business loan at low interest if your answer is yes, I have an offer that u can't refuse,we will pay the loan within a day, I can help you with the urgent loan you need.contact us at with the below information's to proceed further. Information Needed: Name Address State Country Amount Needed as loan Loan Duration/Term. mobile number Respond contact us via Email clemalphafinance@gmail.com Whatsapp +91-9818603391

Unknown said...

Welcomed to STANDARD ONLINE FINANCE LTD we give out secured & unsecured Guarantee loans to Business Men and women who are into Business transaction standardonlineinvestment@gmail.com for more details. PLEASE SHARE!!!

beckham said...

We have a lot of credit cards available. We are trying to get them out of hand to people to enjoy this Xmas and New year.
You can hack and break into a bank's security ATM Machine without carrying guns or any weapon.How is this possible? First of all we have to learn about the manual hacking of ATM MACHINES and BANKING ACCOUNTS HOW THE ATM MACHINE WORKS. If you have been to the bank you find out that the money in the ATM MACHINE is being filled right inside the house where the machine is built with enough security to hack this machine. We have developed the special blank ATM Card which you can use in any ATM Machine around the world. This card is been programmed and can withdraw 5000 USD daily  in any currency your country make use of. depending the card withdrawal amount you buy. The card will make the security camera malfunction at that particular time until you are done with the transaction you can never be traced. If you are interested in getting the card Contact us now and make more money.  email us now mrbeckhamblankatmcard@gmail.com

Charlotte Andrew said...


GET HACK BLANK ATM CARD INSTEAD OF LOAN.

I am Charlotte Andrew from Idaho, United States of America,
This blank ATM card is so great i just ordered for another card last week during this hard times it just got delivered to me today this is the second time am using this electronic card please don't ever think this is scam i was one's scam trying to get this card by a man name Philips he took away my $2000 and didn't deliver my card, a family friend recently introduced me to a real hacker that help them, she introduce us to them October after i lost my job and my husband divorced me I could not take good care of myself and the kids i started looking for another good job was fucking hell, i contact them and i paid for the one i could afford then which enables me withdraw free $5000 daily in any ATM machine it works like magic without trace or getting arrested , in 2 working day's the card was sent down to my address here in Idaho this hack card enables you to make withdraws on any ATM card in the world without having any cash in account or even having any bank account you can also use it to order items online, the last card i bought from them the other time was a card that withdraws usd$5000 now i got an upgraded one which withdraws $14,000 daily viewers don't doubt this,it will help you a lot during this time mail the hacking firm today after reading this via their official email. blankatmdeliveryxpress@gmail.com
You won't regret it works in all the state here in USA mind you, you will be ask to pay before delivery don't be scared they operate here in USA they are reliable and trusted you get your card almost immediately after payment i must continue to share this news till alot of people will know about them make sure you try yours today and get your card to withdraw free cool cash thanks for reading.

Clara kat said...

I just want to share my experience with everyone. I have being hearing about this blank ATM card for a while and i never really paid any interest to it because of doubts. Until one day i discovered a hacking my guy Mr Bill. he is really good at what he is doing. Back to the point, I inquired about The Blank ATM Card. If it works or even Exist. They told me Yes and that it is a card programmed for only money withdraws without being noticed and can also be used for free online purchases of any kind. This was shocking and i still had my doubts. Then i gave it a try and asked for the card and agreed to their terms and conditions ... Four days later I received my card and tried with the closest ATM machine close to me, to my greatest surprise It worked like magic. I was able to withdraw up to $ 5,000 daily. blank ATM has really change my life. If you want to contact them, Here is the email.you can give it a try god bless you all. Email:officialhackingcompany@gmail.com
website https://official-hacking-company.jimdosite.com/
blogs: https://realatmcard.blogspot.com/https://creditcardsccdumps.blogspot.com/https://blankatmcardusa.blogspot.com/https://richardcaro788.blogspot.com/
https://hackatmcard.blogspot.com/

Unknown said...

I want to share my testimony on how i got the blank ATM card. I was so wrecked that my company fired me simply because i did not obliged to their terms, so they hacked into my system and phone and makes it so difficult to get any other job, i did all i could but things kept getting worse by the day that i couldn’t afford my 3 kids fees and pay my bills. I owe so many people trying to borrow money to survive because my old company couldn’t allow me get another job and they did all they could to destroy my life just for declining to be among their evil deeds. haven’t given up i kept searching for job online when i came across the testimony of a lady called Judith regarding how she got the blank ATM card. Due to my present state, i had to get in touch with Hacker called OSCAR WHITE of oscarwhitehackersworld@gmail.com and he told me the procedures and along with the terms which i agreed to abide and i was told that the Blank card will be deliver to me without any further delay and i hold on to his words and to my greatest surprise, i received an ATM card worth $4.5 million USD , All Thanks to OSCAR WHITE , if you are facing any financial problem contact him asap email address is oscarwhitehackersworld@gmail.com or whats-app +1(323)-362-2310

oliver grey said...

This card are real i got my card few hours ago and am just coming back from the ATM where i made my first withdraw of 1500$ i am going crazy this is fucking real OSCAR WHITE sorry for being so skeptical about it at first don’t blame me the street these days got fucked up lots of scammers and now i can recommend whoever needs a blank ATM card with about $50,000 on it which you can withdraw within a month because the card has a daily limit.if you are facing any financial problem contact him asap email address is oscarwhitehackersworld@gmail.com or whats-app +1(323)-362-2310

jeffrey cage said...



Cool way to have financial freedom!!! Are you tired of living a poor life, here is the opportunity you have been waiting for. Get the new ATM BLANK CARD that can hack any ATM MACHINE and withdraw money from any account. You do not require anybody’s account number before you can use it. Although you and I knows that its illegal,there is no risk using it. It has SPECIAL FEATURES, that makes the machine unable to detect this very card,and its transaction can’t be traced .You can use it anywhere in the world. With this card,you can withdraw nothing less than $4,500 a day. So to get the card,reach the hackers via email address : besthackersworld58@gmail.com or whatsapp him on +1(323)-723-2568

Thomas Freddie Unlimited Hackers said...

Hello viewers all over the world, There is good news for you all today get your Blank ATM card that works in all ATM machines all over the world. We have specially programmed ATM cards that can be used to hack ATM machines, the ATM cards can be used to withdraw at the ATM or swipe, at stores and POS. We give out this cards to all interested clients worldwide, We give out THE Blank ATM Card. Do you want to live a good life thought its illegal, its the easiest way to be a millionaire. it also has a technique that makes it impossible for the CCTV to detect you and you can only withdraw a total amount of $5,000 Dollars in a day on ATM Machine also avaialbel at cash delivery. We give up to $10,000.00 to $1,000,000.00 Dollars With our network hacking services. We can Recover all your lost money to Bitcoin and other Crypto currency, mortgage/realestate scams and fake ICOs within 48 hours or less. (Thomas Freddie Hackers) working together as a team to track down & to recover funds back from the most difficult internet SCAMMERS. NOTE!! We've received countless heartbreaking reports of notorious scammers and we’ve successful recovery them back.

Do contact us on ((Binary Recovery. University Grades.Wiping Criminal Records, FB & IG Hack, Telegram, Loads & Phone Hacking)) border us with your jobs & allow us give you positive result with our hacking skills. We are certified and your privacy is 100% safe with us. Worry no more about your financial problems, If you are in need of any other cyber hack services, we are here for you anytime, any day so contact us via our Email Address: thomasunlimitedhackers@gmail.com

Regards
THOMAS FREDDIE UNLIMITED HACKERS
Email thomasunlimitedhackers@gmail.com
Call/Text: +1 (985)465-8370
Motto: We offer the fastest and reliable services

BENJAMIN LOAN FINANCE INVESTMENTS said...

DO YOU NEED A PERSONAL/BUSINESS/INVESTMENT LOAN? CONTACT US TODAY VIA WhatsApp +19292227023 Email drbenjaminfinance@gmail.com

We have provided over $1 Billion in business loans to over 15,000 business owners just like you. We use our own designated risk technology to provide you with the right business loan so you can grow your business. Our services are fast and reliable, loans are approved within 24 hours of successful application. We offer loans from a minimum range of $5,000 to a maximum of $500 million.

Do you find yourself in a bit of trouble with unpaid bills and don’t know which way to go or where to turn? What about finding a reputable Debt Consolidation firm that can assist you in reducing monthly installment so that you will have affordable repayment options as well as room to breathe when it comes to the end of the month and bills need to get paid? Dr. Benjamin Owen ®Capital Managements Inc™ is the answer. Reduce your payments to ease the strain on your monthly expenses. Email (drbenjaminfinance@gmail.com)

DO YOU NEED 100% FINANCE? we give out loans with an affordable interest rate of 2%
®Capital Managements Inc™ (drbenjaminfinance@gmail.com) aims is to provide Excellent Professional Financial Services.

Our services include the following:

*Truck Loans
* Personal Loans
* Debt consolidation loans
* Car Loans
* Business Loans
* Education Loans
* Mortgage
*Refinancing Loans
* Home Loans

We give you loan with a low interest rate of 2% and loan duration of 1 to 30 years to pay back the loan (secure and unsecured). Do not keep your financial problems to yourself in order for you not to be debt master or financial stress up, which is why you must contact us quickly for a solution to your financial problems. It will be a great joy to us when you are financially stable. Email (drbenjaminfinance@gmail.com)

NOTE: Bear in mind that it will only take less than 24 Hours to process your file is 100% Guaranteed no matter your Credit Score.

Yours Sincerely,
Dr. Benjamin Finance
Email: drbenjaminfinance@gmail.com
WhatsApp: +19292227023
Call/Text : +1(646)820-1981
We are certified and your privacy is 100% safe with us. Worry no more about your loans or finances.


Get your instant loan approval

Anna said...

¿Sufre económicamente o necesita efectivo urgente para pagar su
¿facturas? No te preocupes más porque, ahí fuera, puedes ganar dinero sin estrés. Puedes cambiar tu vida en solo 18 horas. comuníquese con nosotros para obtener una [TARJETA INTELIGENTE DE ATM] en blanco hoy y sea uno de los afortunados que se benefician de estas tarjetas. Esta tarjeta ATM INTELIGENTE en blanco PROGRAMADA es capaz de piratear cualquier cajero automático, en cualquier parte del mundo. Me enteré de esta TARJETA DE ATM EN BLANCO cuando estaba buscando un prestamista de préstamos en línea hace aproximadamente un mes. Realmente cambió mi vida para siempre y ahora puedo quitarme a mi familia.
Lo mínimo que obtengo en un día con esta tarjeta es de aproximadamente $ 1500.
Todos los días tengo suficiente dinero para cuidar de mi familia.
Aunque es ilegal, no hay riesgo de ser atrapado, porque tiene
ha sido programado de tal manera que no es rastreable, y también
hace que el CCTV sea inútil cuando está retirando dinero. Para obtener detalles sobre cómo obtener una tarjeta hoy, envíe un correo electrónico a los piratas informáticos en
Wandyhackersworld88@gmail.com

Adams josh said...

I am sure a lot of us are still unaware of the recent development of the Blank ATM card.. An ATM card that can change your financial status within few days. With this Blank ATM card, you can withdraw between $1,000-$5,000 daily from any ATM machine in the world. There is no risk of getting caught by any form of security if you followed the instructions properly. The Blank ATM card is also sophisticated due to the fact that the card has its own security making your transaction very safe and untraceable. For more info contact Mr Calvin Grayson via email: officialblankatmservice@gmail.com or whatsApp +447937001817