Homograph attack on redirect URL

Disclosed: 2018-10-19 22:09:10 By sam75434 To chaturbate
Low
Vulnerability Details
Hello Team There is no Homography protection on redirect URL URL: https://m.chaturbate.com/external_link/?url=http://ebаy.com In Homograph attack basically attacker may able to inject some malicious script with URL. Here i made homograph link for the ebay.com, when normal user see this link its look like normal simple text link but no its not simple link it's crafted homograph malicious script link so when user see this particular link user might be think that they are going to redirect on eBay.com but the fact that the link which add is malicious link and made from homograph encoding so when user click on this link user will redirect on some malicious website. The IDN (Malicious link which i add in website) : https://xn--eby-7cd.com in looking it's look like eBay.com but when user click this link user will redirect on malicious website. Vulnerable URL: https://m.chaturbate.com/external_link/?url=http://ebаy.com Reference https://hackerone.com/reports/29491 https://hackerone.com/reports/175286 ## Impact Attacker may able to inject any homograph URL in website and able to scratch any normal user to their malicious website.
Actions
View on HackerOne
Report Stats
  • Report ID: 385372
  • State: Closed
  • Substate: resolved
  • Upvotes: 8
Share this report