Popping a shell on the Oculus developer portal

#1

Post by bitquark » Sun, Aug 31, 2014, 7:42 PM UTC

Popping a shell on the Oculus developer portal
bitquark.co.uk

Re: Popping a shell on the Oculus developer portal

#2

Post by readerrrr » Sun, Aug 31, 2014, 8:36 PM UTC

If you didn't read:

This was done after Facebook announced that Oculus is a part of their Whitehat program. OP was awarded 25000$ total for finding the vulnerabilities.

Very effective.

Re: Popping a shell on the Oculus developer portal

#3

Post by canadev » Sun, Aug 31, 2014, 9:08 PM UTC

I liked this. I also wonder if it'd be worthwhile for me to take a few months off of work and try just poking away at security bounty programs. I doubt it would pay off to start with, but it seems like a pretty lucrative path. I know the OWASP Top 10, but don't really know my way around Burp Suite or anything.

Re: Popping a shell on the Oculus developer portal

#4

Post by homakov » Sun, Aug 31, 2014, 10:43 PM UTC

canadev wrote: post #3

I liked this. I also wonder if it'd be worthwhile for me to take a few months off of work and try just poking away at security bounty programs. I doubt it would pay off to start with, but it seems like a pretty lucrative path. I know the OWASP Top 10, but don't really know my way around Burp Suite or anything.

I don't know any program except FB with such bounties for bugs in web apps. If you want to hack for money, focus on FB forget about others.

Re: Popping a shell on the Oculus developer portal

#5

Post by rqebmm » Sun, Aug 31, 2014, 10:52 PM UTC

homakov wrote: post #4

canadev wrote: post #3

I liked this. I also wonder if it'd be worthwhile for me to take a few months off of work and try just poking away at security bounty programs. I doubt it would pay off to start with, but it seems like a pretty lucrative path. I know the OWASP Top 10, but don't really know my way around Burp Suite or anything.

I don't know any program except FB with such bounties for bugs in web apps. If you want to hack for money, focus on FB forget about others.

Google has one: https://www.google.com/about/appsecurity/reward-program/

Re: Popping a shell on the Oculus developer portal

#6

Post by voltagex_ » Mon, Sep 01, 2014, 12:13 AM UTC

I haven't seen the BENCHMARK trick before. It's very clever - a variation on timing failed login/password attempts.

This is a clear and effective writeup. Congrats OP.

Re: Popping a shell on the Oculus developer portal

#7

Post by christop » Mon, Sep 01, 2014, 12:23 AM UTC

homakov wrote: post #4

canadev wrote: post #3

I liked this. I also wonder if it'd be worthwhile for me to take a few months off of work and try just poking away at security bounty programs. I doubt it would pay off to start with, but it seems like a pretty lucrative path. I know the OWASP Top 10, but don't really know my way around Burp Suite or anything.

I don't know any program except FB with such bounties for bugs in web apps. If you want to hack for money, focus on FB forget about others.

https://hackerone.com/programs

Re: Popping a shell on the Oculus developer portal

#8

Post by phaus » Mon, Sep 01, 2014, 12:41 AM UTC

canadev wrote: post #3

I liked this. I also wonder if it'd be worthwhile for me to take a few months off of work and try just poking away at security bounty programs. I doubt it would pay off to start with, but it seems like a pretty lucrative path. I know the OWASP Top 10, but don't really know my way around Burp Suite or anything.

If you decide to give it a shot, pay close attention to the policies and procedures that companies post. Facebook has refused to pay people in the past because they didn't use the framework/channels that they have provided.

Re: Popping a shell on the Oculus developer portal

#9

Post by dsl » Mon, Sep 01, 2014, 7:39 AM UTC

canadev wrote: post #3

I liked this. I also wonder if it'd be worthwhile for me to take a few months off of work and try just poking away at security bounty programs. I doubt it would pay off to start with, but it seems like a pretty lucrative path. I know the OWASP Top 10, but don't really know my way around Burp Suite or anything.

Sign up for Bugcrowd and give it a go in your spare time. I would say it pays really well, in that it forces you to exercise and stretch your brain, over time you'll start getting better and work to the point you could quit your day job and do security full time.

Re: Popping a shell on the Oculus developer portal

#10

Post by maqr » Mon, Sep 01, 2014, 8:06 AM UTC

dsl wrote: post #9

canadev wrote: post #3

I liked this. I also wonder if it'd be worthwhile for me to take a few months off of work and try just poking away at security bounty programs. I doubt it would pay off to start with, but it seems like a pretty lucrative path. I know the OWASP Top 10, but don't really know my way around Burp Suite or anything.

Sign up for Bugcrowd and give it a go in your spare time. I would say it pays really well, in that it forces you to exercise and stretch your brain, over time you'll start getting better and work to the point you could quit your day job and do security full time.

How do things like bugcrowd (and bug bounties in general) work from a legal point of view? It seems very risky to go poking around without some kind of formal contract with the target.