nest-protocol / nest-protocol-website Goto Github PK

Hey team,

I am a Security Researcher & I have found that one of your main domain of d app is vulnerable to open redirect vulnerability which means attacker can manipulate users to his or her maliciously crafted sites & can steal some sensitive credentials & also attacker can host phishing campaign there

Kindly fix this

The scenario here is the domain is http://nestdapp.io/
anything after io/anything.com will turn into ioanything.com
so scenario is like if attacker owns ioanything.com he can redirect users to his malicious website
vulnerable url - http://www.nestdapp.io/a.evil.com/

This will be redirected to http://www.nestdapp.ioa.evil.com/
Which is subdomain of evil.com
I have attached a video for proof of concept
Fix it by whitelisting domain & enabling https over all channels

Best,
Amannoobda

Screen.Recording.2021-12-06.at.10.00.03.AM.mov

a monitoring application was available on a remotely accessible administrative console in the nest staging environment, which could have been used to leverage information that could have compromised the server.
kindly fix this by forbid the public access

vulnerable url - https://me.nestdapp.io/druid/index.html

Best,
Amannoobda