I hacked Uber's website yesterday

http://thisshouldbefixed.com/2015/06/13/i-broke-uber/

by uberhacked • 11 years ago

19 6 11 years ago

nsx147• 11 years ago

Some Uber intern probably made that form and didn't know what sanitizing inputs was about. Good find - but easy fix. You usually can't get away with XSS attacks anymore

uberhacked2• 11 years ago

Uber told me they used WordPress to build their petition sites. Maybe other WordPress sites are vulnerable?

noeltock• 11 years ago

WordPress has plenty of functions to sanitize, the one who made the theme or dropped in the form probably overlooked it.

Xylemon• 11 years ago

The "Slip and Slide" bit give me a good laugh. Interesting article, makes me curious about what exploits I have on my own site.

uberhacked2• 11 years ago

Thank you for sharing your thoughts! I'm glad you enjoyed the article. Kickstarter.com is my next target.

droope• 11 years ago

Recommendation: stop being an idiot. With your skills you should be able to land a job in security, and you'll actually make money instead of going to jail like a dumbass.

I hacked Uber's website yesterday

Related Stories