Information Disclosure
In the request below the attacker just changes the username to another user's username, and the response will display some information from the username user
GET /v1/users/nickname/[User-Nickname]
Open
Attacker change another user's Goals status to 'Completed'
Create a new Goal on account A, and on account B click 'Support me' and proceed to payment Go back to account A and click 'Complete goal' intercept the request with Burp PUT /v1/wallets/goal-donation/[ID-goals]'.
Open
Attacker update another user’s Goals
Update Existing goal on Attacker’s account Intercept the request then change id to Victim Goal donation id PUT /v1/wallets/goal-donation/[ID-goals]'.
Open
Attacker delete another user’s Goals
Delete Existing goal on Attacker’s account Intercept the request then change id to Victim Goal donation id PUT /v1/wallets/goal-donation/[ID-goals]'.
Open
Attacker create new Goal Donation for another user
Attacker create new goal donation, intercept request before click button create POST /v1/wallets/me/goal-donation
Open
Users can rate products more than once
Buy another user's product and go to the page https://ganknow.com/manage/my-orders Click the Leave a Review button and intercept the request with Burpsuite Right click and Send to repeater POST /v1/catalogs/services/[order-id]/reviews
make sure order id is exist and order the same service and come from same users double checking on one order id only can submit by one review Open
Users can change the URL of the Attachments URL
Create a new listing on https://ganknow.com/plecle/shop fill in the title, description, etc. [or edit an existing one] In the 'Listing type' select Digital Goods and Upload Attachments then Publish Return to the newly created listing and click Edit Listing Intercept requests with Burp PUT /v1/catalogs/services/[services-id]
Validate download link with only allowed scheme http or https Open
Attacker change another user’s Listing price to $0
Open
Attacker create new membership on another user’s account
Open
Attacker Delete victim membership
DELETE /v1/users/membership-settings-v2
Open
Attacker withdraw more than existing balance
POST /v1/wallets/withdrawal-requests
Open
Attacker withdraw less than minimum withdraw
POST /v1/wallets/withdrawal-requests
Open
Attacker change victim withdraw account
Open
Attacker change earnings balance
Open
Attacker change donation ammount from transaction history
PATCH /v1/wallets/(Tranasaction ID)/transactions
Open