full-disclosure - Re: [FD] Brute force every Samsung repair customer's info with ease

Open Source and information security mailing list archives

Date: Mon, 12 Sep 2016 20:01:52 -0500
From: Justa Person <keepondoin@...il.com>
To: Nick <akarta315h@...il.com>
Cc: fulldisclosure@...lists.org
Subject: Re: [FD] Brute force every Samsung repair customer's info with ease

Sure..Was having one heck of a time figuring out the proper number to enter
into the web form for my own repair and got to thinking about how terrible
it seemed to disclose all that info based on just a ticket number and
telephone number..And that I had tried a LOT of combinations from the info
they had given me unsuccessfully without any lockout or anything. Putting
those together I was able to do about 500 guesses/minute with that ugly
code. But given that I encountered zero throttling or anything I would
assume spawning some workers, perhaps across a botnet even, would make
short work of enumerating the valid combinations.

Oh, and they are nice enough to inform you if you try to pass a bad ticket
number too.

On Mon, Sep 12, 2016 at 5:49 PM, Nick <akarta315h@...il.com> wrote:

> You wish to give anymore info on how u came cross this? Please.
>
> Ta
>
> On 12 Sep 2016 17:45, "Justa Person" <keepondoin@...il.com> wrote:
>
>> Samsung has zero interest in fixing this and I'm tired of trying to report
>> it to them. Enjoy.
>>
>> http://pastebin.com/cKu2WDGV
>>
>> _______________________________________________
>> Sent through the Full Disclosure mailing list
>> https://nmap.org/mailman/listinfo/fulldisclosure
>> Web Archives & RSS: http://seclists.org/fulldisclosure/
>>
>

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives