148 matches found
Keybase: Un-handled exception leads to Information Disclosure
Steps: 1. Login to https://keybase.io/ 2. Click on Me icon from top-right button https://keybase.io/username 3. Click on Edit picture button https://keybase.io/usernameedit-me 4. Intercept the traffic using proxy tool e,g, Burp Suite 5. Click on "Prove my Twitter identity" link 6. In the request,...
Keybase: xss
This xss issue only affects content sniffing browsers older versions that don't see the X-Content-Type-Options: nosniff header that you're sending. https://keybase.io//api/1.0/user/lookup.json?usernames=fakeuser1%2cfakeuser2'%22%26%25prompt/XSS/ This returns a page that contains this information:...
Keybase: [keybase.io] Open Redirect
PoC https://keybase.io//www.google.com/%2f%2e%2e HTTP Response: HTTP/1.1 303 See Other ... Location: //www.google.com/%2f%2e%2e/...
Keybase: Sensitive server-side/application information disclosure
There is an Information disclosure vulnerability present in Keybase API request whenever an exception occurs. Steps to reproduce: Open the following URL in any browser - https://keybase.io//api/1.0/user/lookup.json?twitter=john&github=john&usernames=john&usernames=rock Observe that when we add...
Keybase: Full path disclosure at https://keybase.io/_/api/1.0/invitation_request.json
When we send a POST-request to https://keybase.io//api/1.0/invitationrequest.json with multiple fullname parameters, for example: [email protected]&fullname=1&fullname=2 we get an error response, which contains infromation about the server paths and code: TypeError: Object 1,2 has no method...
Keybase: No rate limiting for sensitive actions (like "forgot password") enables user enumeration
Hi there, I noticed a small information leak which allows an attacker to check whether an email address is associated with an account. Steps to reproduce: Send a POST-Request to the url POST //api/1.0/send-reset-pw.json HTTP/1.1 as the following example shows: POST //api/1.0/send-reset-pw.json...
Keybase: SMTP protection not used
Hi I'm checking your website found spf record there. You should apply strict SMPT policy to stop spoofed email sending from your domain. An attacker would send a Fake email from [email protected] saying that Please change your password, The victim is aware of phishing attacks, But when he sees...