on a mission

[on a mission @Gus161007]

@Wet3Site Site is down

[on a mission @Gus161007]

Mid

[Afec @dear_traderr]

I've been making N20k every second in lagos life game.

There's a bug in the system, you can modify the game state and send it to the server through PUT /api/save.
Here's the game flow which has the vulnerability;

Browser
│
│ GET /api/save
▼
Server
│
│ returns current game state
▼
Browser
│
│ modifies https://t.co/9s3RsRqcUv
▼
Browser
│
│ PUT /api/save
│ { game: modifiedGame }
▼
Server
│
│ saves supplied state
▼
Database

Seems earlier @Shalom_HeyEliy uses updatedAt to solve the problem, but still doesn't, user can request the updatedAt stamp, and resubmit with it but with modified https://t.co/9s3RsRqcUv value, below is a video proof.

[on a mission @Gus161007]

@Shalom_HeyEliy luckyyy

[on a mission @Gus161007]

@luxyfan @mc_lively_ You no fit understand sarcasm?

[on a mission @Gus161007]

@AnuriamI Niggas go find something simple dey behave like Superman simple ass vuln see how the nigga do post like he hack google

[on a mission @Gus161007]

@ogbajiolivia Add me oh austinik

[on a mission @Gus161007]

@ogbajiolivia @austinik

[on a mission @Gus161007]

@Vannialll Thanks for the free giftcard

[on a mission @Gus161007]

Odumodu legacy

[on a mission @Gus161007]

Lowkey forgot about this bookmark so ummm yeah hold that son

[Advitya @addy_fpl]

@chiddyafc @Relly_95 Josh hart can’t come close to an nba title he’s been yapping way too much about arsenal in general. A wemby chip maybe better than a knicks championship

[on a mission @Gus161007]

@Just_uzan Austin ke I don die 🤣🤣🤣
Namesake

[on a mission @Gus161007]

@sleeknih Cap

[👑S.A.L.A.K.O🕊 @UnkleAyo]

@inecnigeria The only acceptable action is for the Chairman to resign - for #AmupitanOut

The integrity of the Institution is already compromised. He needs to step down and step away.

Is he also a RCCG Pastor?

[on a mission @Gus161007]

@itiiswellwithme @SuperSmada @Johnnyescoba @SuperSmada your phone don off???

[on a mission @Gus161007]

@EASFCDirect Fix the PC port!!!

[on a mission @Gus161007]

Darkskin igbo women>>>

[on a mission @Gus161007]

@BIG_SAMZZ1 @socetyhatesjay @Adegbofashion @ojurereoluwa_s Nah fool.

[on a mission @Gus161007]

@ebubeaguXchange @abd81535 @grok Oya send for dm

[on a mission @Gus161007]

@socetyhatesjay

[on a mission @Gus161007]

@elonhatesDERA He actually release am 🤣🤣🤣