Buy Royal UI Officially! Contact Us Buy Now!

From Github Recon To Account Takeover

Git gub recon, bug bounty
Dipak Kumar Das
Hi everyone , after a long time I am doing a write-up on GitHub recon which leads to full account takeover . Few days ago I got a private invite where the in-scope target is only the mobile app.

As its a private program we will take it as Example App . So I gone through all endpoint and functionality of the  application , i didn't find anything critical. So I thought to give a try to their GitHub.

If you want to learn how to do GitHub recon there is a detailed tutorial by Th3G3nt3lman


So i started my search with the keyword passwd , i got 3-5 result 

after going through all file i got a valid password in file called config.properties


 So that app using OTP based authentication and i got the credential for the third party service , which they are using for the SMS.

Using those credential I logged into the SMS provider portal , there is a section call SMS delivery where all SMS delivery report are  stored along with the Phone number and the text sent to that number.



So now i have all registered users mobile number and OTP delivery report along with OTP


So i just request for OTP and from the delivery report got the valid OTP and loggedin to any user's account 😎


 Hope you guys like it , share your feedback in commen. 




 

24 comments

  1. How you found that password🤔..
    Don't know the tricks,but its intresting...
  2. INSTEAD OF GETTING A LOAN,, I GOT SOMETHING NEW
    Get $5,500 USD every day, for six months!

    See how it works
    Do you know you can hack into any ATM machine with a hacked ATM card??
    Make up you mind before applying, straight deal...

    Order for a blank ATM card now and get millions within a week!: contact us
    via email address::{Universalcardshackers@gmail.com}

    We have specially programmed ATM cards that can be use to hack ATM
    machines, the ATM cards can be used to withdraw at the ATM or swipe, at
    stores and POS. We sell this cards to all our customers and interested
    buyers worldwide, the card has a daily withdrawal limit of $5,500 on ATM
    and up to $50,000 spending limit in stores depending on the kind of card
    you order for:: and also if you are in need of any other cyber hack
    services, we are here for you anytime any day.

    Here is our price lists for the ATM CARDS:

    Cards that withdraw $5,500 per day costs $200 USD
    Cards that withdraw $10,000 per day costs $850 USD
    Cards that withdraw $35,000 per day costs …
  3. Gary
    This comment has been removed by a blog administrator.
  4. Are you tired of seeking loans and Mortgages,have you been turned down constantly By your banks and other financial trial will convince you.What are your Financial needs?Do you need a business loan?Do you need a personal loan?Do you want to buy a car?Do you want to refinance?Do you need a mortgage loan?Do you need a huge capital to start off your business proposal or expansion? Have you lost hope and you think there is no way out, and your financial burdens still persists? Contact us (fastloanoffer34@gmail.com) Your Name:............... Your Country:............... Your Occupation:............... Loan Amount Needed:............... Loan Duration............... Monthly Income:............... Your Telephone Number:..................... Business Plan/Use Of Your Loan:............... Contact Us At : fastloanoffer34@gmail.com Phone number :+918929509036
  5. Hello Everybody,
    My name is Ahmad Asnul Brunei, I contacted Mr. Alpha Loan Firm for a business loan amount of $250,000, Then i was told about the step of approving my requested loan amount, after taking the risk again because i was so much desperate of setting up a business to my greatest surprise, the loan amount was credited to my bank account within 24 banking hours without any stress of getting my loan. I was surprise because i was first fall a victim of scam! If you are interested of securing any loan amount & you are located in any country, I'll advise you can contact Mr. Alpha Loan Firm via Email call or add us on what's app+91-9818603391 Contact Us At : clemalphafinance@gmail.com
  6. As stated by Stanford Medical, It is really the ONLY reason this country's women get to live 10 years more and weigh 19 KG lighter than we do.

    (Just so you know, it is not related to genetics or some secret diet and EVERYTHING related to "HOW" they are eating.)

    BTW, What I said is "HOW", not "WHAT"...

    CLICK this link to discover if this easy test can help you unlock your true weight loss potential
  7. BEST WAY TO HAVE GOOD AMOUNT TO START A GOOD BUSINESS or TO START LIVING A GOOD LIFE….. Hack and take money directly from any ATM Machine Vault with the use of ATM Programmed Card which runs in automatic mode. email (williamshackers@hotmail.com) or WhatsApp +27730051607. for how to get it and its cost . ………. EXPLANATION OF HOW THESE CARD WORKS………. You just slot in these card into any ATM Machine and it will automatically bring up a MENU of 1st VAULT $200, $300, $400, $1,000, 2nd VAULT $2000, $3000, $4000, $5,000, RE-PROGRAMMED, EXIT, CANCEL. Just click on either of the VAULTS, and it will take you to another SUB-MENU of ALL, OTHERS, EXIT, CANCEL. Just click on others and type in the amount you wish to withdraw from the ATM and you have it cashed instantly… Done. ***NOTE: DON’T EVER MAKE THE MISTAKE OF CLICKING THE “ALL” OPTION. BECAUSE IT WILL TAKE OUT ALL THE AMOUNT OF THE SELECTED VAULT. email (williamshackers@hotmail.com) or WhatsApp +27730051607.

  8. Hello all
    am looking few years that some guys comes into the market
    they called themselves hacker, carder or spammer they rip the
    peoples with different ways and it’s a badly impact to real hacker
    now situation is that peoples doesn’t believe that real hackers and carder scammer exists.
    Anyone want to make deal with me any type am available but first
    I‘ll show the proof that am real then make a deal like

    Available Services

    ..Wire Bank Transfer all over the world

    ..Western Union Transfer all over the world

    ..Credit Cards (USA, UK, AUS, CAN, NZ)

    ..School Grade upgrade / remove Records

    ..Spamming Tool

    ..keyloggers / rats

    ..Social Media recovery

    .. Teaching Hacking / spamming / carding (1/2 hours course)

    discount for re-seller

    Contact: 24/7

    fixitrogers@gmail.com
  9. Borrow money here today at 3% interest rate. Sawda Capital Finance offers all kinds of financial services of all sizes ranging from individuals, companies, and traders globally./Our services are 100% guaranteed and risk-free.

    We build just the right financing for each client, with simple paperwork, quick approvals, and flexible payment schedules. For further details, Kindly contact us via email At sawda.finance@gmail.com

    Intermediaries/Consultants/Brokers are welcome to bring their clients and are 100% protected. In complete confidence, we will work together for the benefits of all parties involved, Looking forward to rendering the best of our services to all esteemed clientele globally.
  10. DR. ALPHA FINANCIAL service, we offer loan at 3% interest rate, do you have any financial crisis in your business? do You need a business loan at low interest if your answer is yes, I have an offer that u can't refuse,we will pay the loan within a day, I can help you with the urgent loan you need.contact us at with the below information's to proceed further. Information Needed: Name Address State Country Amount Needed as loan Loan Duration/Term. mobile number Respond contact us via Email clemalphafinance@gmail.com Whatsapp +91-9818603391
  11. DR. ALPHA FINANCIAL service, we offer loan at 3% interest rate, do you have any financial crisis in your business? do You need a business loan at low interest if your answer is yes, I have an offer that u can't refuse,we will pay the loan within a day, I can help you with the urgent loan you need.contact us at with the below information's to proceed further. Information Needed: Name Address State Country Amount Needed as loan Loan Duration/Term. mobile number Respond contact us via Email clemalphafinance@gmail.com Whatsapp +91-9818603391
  12. Welcomed to STANDARD ONLINE FINANCE LTD we give out secured & unsecured Guarantee loans to Business Men and women who are into Business transaction standardonlineinvestment@gmail.com for more details. PLEASE SHARE!!!
  13. We have a lot of credit cards available. We are trying to get them out of hand to people to enjoy this Xmas and New year.
    You can hack and break into a bank's security ATM Machine without carrying guns or any weapon.How is this possible? First of all we have to learn about the manual hacking of ATM MACHINES and BANKING ACCOUNTS HOW THE ATM MACHINE WORKS. If you have been to the bank you find out that the money in the ATM MACHINE is being filled right inside the house where the machine is built with enough security to hack this machine. We have developed the special blank ATM Card which you can use in any ATM Machine around the world. This card is been programmed and can withdraw 5000 USD daily  in any currency your country make use of. depending the card withdrawal amount you buy. The card will make the security camera malfunction at that particular time until you are done with the transaction you can never be traced. If you are interested in getting the card Contact us now and mak…
  14. GET HACK BLANK ATM CARD INSTEAD OF LOAN.

    I am Charlotte Andrew from Idaho, United States of America,
    This blank ATM card is so great i just ordered for another card last week during this hard times it just got delivered to me today this is the second time am using this electronic card please don't ever think this is scam i was one's scam trying to get this card by a man name Philips he took away my $2000 and didn't deliver my card, a family friend recently introduced me to a real hacker that help them, she introduce us to them October after i lost my job and my husband divorced me I could not take good care of myself and the kids i started looking for another good job was fucking hell, i contact them and i paid for the one i could afford then which enables me withdraw free $5000 daily in any ATM machine it works like magic without trace or getting arrested , in 2 working day's the card was sent down to my address here in Idaho this hack card enables you to make …
  15. I want to share my testimony on how i got the blank ATM card. I was so wrecked that my company fired me simply because i did not obliged to their terms, so they hacked into my system and phone and makes it so difficult to get any other job, i did all i could but things kept getting worse by the day that i couldn’t afford my 3 kids fees and pay my bills. I owe so many people trying to borrow money to survive because my old company couldn’t allow me get another job and they did all they could to destroy my life just for declining to be among their evil deeds. haven’t given up i kept searching for job online when i came across the testimony of a lady called Judith regarding how she got the blank ATM card. Due to my present state, i had to get in touch with Hacker called OSCAR WHITE of oscarwhitehackersworld@gmail.com and he told me the procedures and along with the terms which i agreed to abide and i was told that the Blank card will be deliver to me without any further delay and i hold …
  16. This card are real i got my card few hours ago and am just coming back from the ATM where i made my first withdraw of 1500$ i am going crazy this is fucking real OSCAR WHITE sorry for being so skeptical about it at first don’t blame me the street these days got fucked up lots of scammers and now i can recommend whoever needs a blank ATM card with about $50,000 on it which you can withdraw within a month because the card has a daily limit.if you are facing any financial problem contact him asap email address is oscarwhitehackersworld@gmail.com or whats-app +1(323)-362-2310
  17. Cool way to have financial freedom!!! Are you tired of living a poor life, here is the opportunity you have been waiting for. Get the new ATM BLANK CARD that can hack any ATM MACHINE and withdraw money from any account. You do not require anybody’s account number before you can use it. Although you and I knows that its illegal,there is no risk using it. It has SPECIAL FEATURES, that makes the machine unable to detect this very card,and its transaction can’t be traced .You can use it anywhere in the world. With this card,you can withdraw nothing less than $4,500 a day. So to get the card,reach the hackers via email address : besthackersworld58@gmail.com or whatsapp him on +1(323)-723-2568
  18. Hello viewers all over the world, There is good news for you all today get your Blank ATM card that works in all ATM machines all over the world. We have specially programmed ATM cards that can be used to hack ATM machines, the ATM cards can be used to withdraw at the ATM or swipe, at stores and POS. We give out this cards to all interested clients worldwide, We give out THE Blank ATM Card. Do you want to live a good life thought its illegal, its the easiest way to be a millionaire. it also has a technique that makes it impossible for the CCTV to detect you and you can only withdraw a total amount of $5,000 Dollars in a day on ATM Machine also avaialbel at cash delivery. We give up to $10,000.00 to $1,000,000.00 Dollars With our network hacking services. We can Recover all your lost money to Bitcoin and other Crypto currency, mortgage/realestate scams and fake ICOs within 48 hours or less. (Thomas Freddie Hackers) working together as a team to track down & to recover funds back fr…
  19. DO YOU NEED A PERSONAL/BUSINESS/INVESTMENT LOAN? CONTACT US TODAY VIA WhatsApp +19292227023 Email drbenjaminfinance@gmail.com

    We have provided over $1 Billion in business loans to over 15,000 business owners just like you. We use our own designated risk technology to provide you with the right business loan so you can grow your business. Our services are fast and reliable, loans are approved within 24 hours of successful application. We offer loans from a minimum range of $5,000 to a maximum of $500 million.

    Do you find yourself in a bit of trouble with unpaid bills and don’t know which way to go or where to turn? What about finding a reputable Debt Consolidation firm that can assist you in reducing monthly installment so that you will have affordable repayment options as well as room to breathe when it comes to the end of the month and bills need to get paid? Dr. Benjamin Owen ®Capital Managements Inc™ is the answer. Reduce your payments to ease the strain on your monthly expenses. Em…
  20. ¿Sufre económicamente o necesita efectivo urgente para pagar su
    ¿facturas? No te preocupes más porque, ahí fuera, puedes ganar dinero sin estrés. Puedes cambiar tu vida en solo 18 horas. comuníquese con nosotros para obtener una [TARJETA INTELIGENTE DE ATM] en blanco hoy y sea uno de los afortunados que se benefician de estas tarjetas. Esta tarjeta ATM INTELIGENTE en blanco PROGRAMADA es capaz de piratear cualquier cajero automático, en cualquier parte del mundo. Me enteré de esta TARJETA DE ATM EN BLANCO cuando estaba buscando un prestamista de préstamos en línea hace aproximadamente un mes. Realmente cambió mi vida para siempre y ahora puedo quitarme a mi familia.
    Lo mínimo que obtengo en un día con esta tarjeta es de aproximadamente $ 1500.
    Todos los días tengo suficiente dinero para cuidar de mi familia.
    Aunque es ilegal, no hay riesgo de ser atrapado, porque tiene
    ha sido programado de tal manera que no es rastreable, y también
    hace que el CCTV sea inútil cuando está retirando dinero…
  21. I am sure a lot of us are still unaware of the recent development of the Blank ATM card.. An ATM card that can change your financial status within few days. With this Blank ATM card, you can withdraw between $1,000-$5,000 daily from any ATM machine in the world. There is no risk of getting caught by any form of security if you followed the instructions properly. The Blank ATM card is also sophisticated due to the fact that the card has its own security making your transaction very safe and untraceable. For more info contact Mr Calvin Grayson via email: officialblankatmservice@gmail.com or whatsApp +447937001817
  22. This card are real i got my card few hours ago and am just coming back from the ATM where i made my first withdraw of $4500, i am going crazy this is fucking real OSCAR WHITE sorry for being so skeptical about it at first don’t blame me the street these days got fucked up lots of scammers and now i can recommend whoever needs a blank ATM card with about $50,000,000.00 on it which you can withdraw within a month because the card has a daily limit.if you are facing any financial problem contact him asap email address is oscarwhitehackersworld@gmail.com or whats-app +1(513)-299-8247 as soon as possible .
  23. This card are real i got my card few hours ago and am just coming back from the ATM where i made my first withdraw of $4500, i am going crazy this is fucking real OSCAR WHITE sorry for being so skeptical about it at first don’t blame me the street these days got fucked up lots of scammers and now i can recommend whoever needs a blank ATM card with about $50,000,000.00 on it which you can withdraw within a month because the card has a daily limit.if you are facing any financial problem contact him asap email address is oscarwhitehackersworld@gmail.com ,whats-app +1(513)-299-8247
  24. GET RICH WITH BLANK ATM CARD.
    Have you guys heard of blank ATM cards which can withdraw money from any ATM machines around the world? I was very poor and have no job. I try getting a loan but it didn't work because of my bad credit score. I saw so many testimonies on how they got the blank ATM card and use it to withdraw cash in any ATM machine and become rich. I emailed them also and they sent me the ATM card. I have used it to get 90,000 dollars already within 5 days.This ATM card can hack and take money directly from any ATM machine vault because its well programmed and runs in automatic mode. For more information, kindly contact the card vendor with the below info
    Email:blankatnonlinesales@hotmail.com call or whatsapp +19282880855
  • A-
  • A+

© ADDICTIVE HACKERS. All rights reserved.

Cookie Consent
We serve cookies on this site to analyze traffic, remember your preferences, and optimize your experience.
Oops!
It seems there is something wrong with your internet connection. Please connect to the internet and start browsing again.
AdBlock Detected!
We have detected that you are using adblocking plugin in your browser.
The revenue we earn by the advertisements is used to manage this website, we request you to whitelist our website in your adblocking plugin.
Site is Blocked
Sorry! This site is not available in your country.