Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Partyhack 3.0 - Telegram bugbounty writeup

Bo0oM
April 12, 2019
3.9k

Partyhack 3.0 - Telegram bugbounty writeup

Bo0oM

April 12, 2019
Tweet

Transcript

  1. Вступление

    View full-size slide

  2. КАК-ТО МНЕ
    НУЖНО БЫЛО
    ПРИДУМАТЬ
    ТЕМУ ДЛЯ
    ДОКЛАДА
    Как я
    телеграм
    ломал

    View full-size slide

  3. https://github.com/Bo0oM/fuzz.txt

    View full-size slide

  4. https://github.com/Bo0oM/server-status-monitor

    View full-size slide

  5. https://github.com/telegramdesktop/tdesktop/blob/cc2c13d0182c62dd5a89784a49ec375306
    449797/Telegram/SourceFiles/core/crash_report_window.cpp#L506

    View full-size slide

  6. Database: tdesktopdbase
    Table: users
    [4 columns]
    +----------+
    | Column |
    +----------+
    | id | int(11) |
    | login |
    | logincrc |
    | pwdhash |
    +----------+
    Database: tdesktopdbase
    Table: keyvalue
    [3 columns]
    +--------+
    | Column |
    +--------+
    | key |
    | value |
    | id |
    +--------+
    Database: tdesktopdbase
    Table: crashes
    [6 columns]
    +----------+
    | Column |
    +----------+
    | date |
    | version |
    | dump |
    | id | int(11) |
    | platform |
    | viewed |
    +----------+

    View full-size slide

  7. https://t.me/WebPwn
    https://twitter.com/i_bo0om

    View full-size slide