WRITEUP #5972

#Bug Bounty — How I booked a rental house for just 1.00 INR — Price Manipulation in Citrus Pay

OtherParameter tampering

byRaghavendra Reddy

Program

Published

May 31, 2018

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://medium.com/@raghav2039/bug-bounty-how-i-booked-a-rental-house-for-just-1-00-inr-price-manipulation-in-citrus-pay-318ff6e0d8a8

▸ RELATED WRITEUPS

[$500] How I was able to give verification badge to any YouTube channel and bypass needed requirements

OtherParameter tampering

Data Theft in Salesforce: Manipulating Public Links

OtherSOQL injection

When Certificates Fail: A Story of Bypassed MFA in Remote Access

Other2FA / MFA bypass

SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff

OtherSSTI

Ghost In The Ppl Part 1: Byovdll

OtherUse-After-Free

Built with ❤️ by Shubham Rawat