#2 OTP Bypass | Response Manipulation | Bug Bounty POC | CyberTron |
Bug Type - Improper Authentication – Generic CWE-287
Summary:
While testing the site I found the registration OTP bypass error which lead to create new accounts
without verifying them and can generate different account from different number unlimited times.
Steps To Reproduce:
1. Register with a number
2. Entering the OTP which I received on my number
3. Validating the response from burpsuite
4. Copying the response from burpsuite .
*This response is generated from Real OTP verification *
5. In response code we found 1 parameters where phone number is placed
6. Now we close the connection and start the registration process from beginning with
different number
7. Do register and it’ll prompt for OTP Verification and we going to put wrong OTP for
verification.
8. We capture the response of OTP validation and get login error response from the server
9. Now we need to use the old captured response, which is verified from Real OTP Verification
(Check step 5 for info).
10. Change the phone number parameter with the number you want to registered and forward
the request to server
11. And done we bypass the OTP verification for new registration
12. Click on register and done we created a new user without verifying OTP
References - https://infosecwriteups.com/otp-bypas...