Yasser Ali personal blog

Hacking PayPal Accounts with one click

yasserali.com

Today I am going to publicly disclose a critical vulnerability I have found during my research in PayPal, This vulnerability enabled me to completely bypass the CSRF Prevention System implemented by PayPal, The vulnerability is patched very fast and PayPal paid me the maximum bounty they give ;).

Points

324

HN comments

99

Submissions

1

Cited by

0 commenters

Security & PrivacyWeb & Frontend2014

Related posts from the same era

Launching in 2015: A Certificate Authority to Encrypt the Entire Web

EFF Deeplinks20142,019 points461 commentscited by 6 details

Instagram's Million Dollar Bug

EEXFiLTRATED20151,562 points520 commentscited by 6 details

Let's Encrypt is Trusted

Let's Encrypt Blog20151,260 points311 comments details

Entering Public Beta

Let's Encrypt Blog20151,249 points213 comments details

Confirmed: The NSA is Spying on Millions of Americans

EFF Deeplinks20131,227 points444 commentscited by 3 details

Path texts my entire phonebook at 6 AM

BBranded3 Blog20131,223 points409 commentscited by 3 details