Github Account hijack through broken link in developer.twitter.com
High
X
X (Formerly Twitter)
Submitted None
Actions:
Reported by
milankatwal99
Vulnerability Details
Technical details and impact analysis
Description
A link in https://developer.twitter.com/en/docs/twitter-api/tools-and-libraries was broken and anyone could create that account which leads to account impersonate
Steps To Reproduce
1) Visit https://developer.twitter.com/en/docs/twitter-api/tools-and-libraries
2) Scroll down to Javascript/Node.js and click on by @HunterLarco (v2)
3) Create github username HunterLarcol
4) When someone visits and scroll down to javascript/Node.js and click on @HunterLarco (v2). They are redirected to my account
similar report
https://hackerone.com/reports/265696
To solve this issue
put this link https://github.com/HunterLarco
Please let me know if you have any questions. I am happy to help
## Impact
Impact
The users are coming from developer.twitter.com So, the attacker can put malicious content on the github and many users will be the victim for example https://github.com/HunterLarcol/twitter-v2. Moreover it leads to the loss in the reputation of the company
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Phishing