2016-04-05
Länk

Hur man beställer gratis pizza över Internet

Paul Price:

As expected the card is declined and the App shows an error message. Let’s try our luck by intercepting the response and changing some values around. I start a new order and set breakpoints on the HTTP endpoint for the DataCash API. Once the breakpoint triggers on the response, I change the <reason> attribute value to ACCEPTED and <status> to 1 (which means transaction accepted according to the DataCash documentation).

It looks like my order was placed without a valid payment. Surely this is an oversight/edge case and Dominos’s will have back office checks in place before physically starting to prepare my order… right?

En hungrig hacker är en kreativ hacker.

 



© 2018 Omsoc Publishing AB