Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/03/31 1:8 a.m.15 views

Uber: Brute Forcing rider-view Endpoint Allows for Counting Number of Active Uber Drivers

m.uber.com has an endpoint at https://m.uber.com/proxy-rt/product/city/rider-view that when called will return a list of nearby vehicles. By iterating through all latitudes and longitudes, it is possible to count the total number of active Uber drivers. The full URL to be called is...

0.3AI score
SaveExploits0
Rows per page
Query Builder