Posts

Showing posts with the label DRBRIX

STEAM Wallet balance can be acquired more than deposit-Bug discovery-Reporter $ 7,500 for reporter

A bug was reported that makes the balance of STEAM wallet that used to purchase game purchase, etc. for PC game delivery platform STeam operated by Valve. According to DRBRIX, by DRBRIX, to do this bug, the e-mail address registered in the STEAM account is made to include the character string Amount100, and after SMART2PAY, a small amount of payment procedure to STEAM wallet It needs to be done. At this time, it was possible to intercept the request sent to Smart2Pay and rewrites a part of the request using the character string included in the email address, and it was possible to increase the amount of money that is actually deposited on the Steam wallet. It is. This bug that could get many STEAM wallets at a slight expense. Currently, Valve has made corrections and executable, and DRBRIX has a $ 7,500 (approximately 820,000 yen) rewards.

Hackers discovered Exploit to produce money on Steam - get 6,300 €

A hacker recovered a destructive exploit recently. A simple trick was allowed to make Steam to multiply the value of money in the steam balance. He reported the exploit and conceded a comparatively small sum as a reward. What was that for an exploit? A bug in the system of Steam software read a kind of money proliferation. Anyone who had the term Amount100 in his user name for Steam could intercept payments that were made via smart2pay on the way to the server and then blow out them. So you could easily make 100 dollars from a dollar, which then showed legitimately in the Steam balance. So you would have to buy all sorts of games in Steam and for money laundering can be sold again. How criminals could have paralyzed the entire economic system of Valves distribution platform. Hacker gets comparatively low reward What was the reward of honesty? The hacker who carries the nickname DRBRIX found the exploit, but instead of using him and to enrich him, he posted the whole thing with...