Uber: Uber password reset link EMAIL FLOOD

2016-03-27T19:15:02
ID H1:126364
Type hackerone
Reporter anish2good
Modified 2016-06-13T22:13:35

Description

Step to reproduce Uber password reset link EMAIL FLOOD POC Video https://youtu.be/PPJkO_Eo6Mw

  1. Used OWSAP ZAP Proxy
  2. Generated the forgotten password Link of my account (anish2good@yahoo.co.in)
  3. Used ZAP to replay the packet
  4. The Number of replay resulting into number of password link email which causing the USER Inbox to flood with UBER SCAM
  5. Attaching the POC as Video https://youtu.be/PPJkO_Eo6Mw