Last year, a friend was planning a trip to an amusement park for her bday. Site design is often a good heuristic for security and the design wasn't inspiring confidence—so I went poking. A fun story of finding a payment bypass in PayU India and the subsequent disclosure arc:
In the coming day or two, I'll be sharing the full details on how it was possible to bypass PayU India's hosted checkout flow and get free stuff from any merchant bonus: failed managed disclosure programs, my credit card being abused, and
@IndianCERTbeing awesome!
