$4,500 Mobile CSRF – bug reported and rewarded twice to Twitter on Hackerone

April 21, 2020

This video is a story of the mobile CSRF bug reported to Twitter’s bug bounty program run on Hackerone and affecting Twitter’s Periscope application.
Reports:
Android: https://hackerone.com/reports/583987
iOS: https://hackerone.com/reports/805073

00:00 Intro
00:16 CSRF
00:50 the first report
02:32 the second report

#mobile #CSRF #hackerone #twitter