Today's e-commerce ecosystem is a highly interconnected and network-dependent environment, bringing unprecedented shopping convenience to consumers. However, like a coin has two sides, e-commerce websites also face a range of security threats. Pre-Authentication takeover vulnerabilities, API security vulnerabilities and information disclosure are three prominent security concerns that can allow hackers to compromise the site before users and companies even realize it.

Injamam from Bangladesh has found three kinds of vulnerabilities in the site. He will share the three types of vulnerabilities he found on the redacted.com website and propose corresponding protective measures to promote the security of the related ecosystem.

Pre-Authentication takeover vulnerability:
This refers to a situation where an attacker can gain control of a user's account before the user completes the authentication process. This type of vulnerability typically occurs in the early stages of the authentication process, such as after the user has entered their username and password but before their identity has been verified. Once attackers exploit this vulnerability, they can steal users' private information, conduct unauthorized transactions, and even lock out the original user from accessing their account.

API security vulnerability:
This involves the website's Application Programming Interface (API), which is a set of rules that allow applications to communicate with each other. APIs are the cornerstone of modern e-commerce platforms because they allow different software systems to integrate and exchange data efficiently. However, if APIs are not properly secured, they can become targets for attackers. This can lead to data breaches and service interruptions.

Directory brute forcing leads to Information disclosure:
Directory brute forcing is a common technique in penetration testing and bug bounty hunting.Directory brute forcing is a method used to uncover hidden directories and files on a web server. This technique involves systematically trying out a list of common directory and file names to see if any of them are accessible. The aim is to find directories, which might contain sensitive information or provide unintended access.

How I found these bugs? Click here to know: E-commerce website vulnerability bounty practice sharing: Pre-Authentication takeover, API security vulnerabilities And Directory Brute Forcing（I）