Other nomination

Free MacWorld Platinum Pass? Yes in 2008!

Kurt Grutzmacher

Kurt Grutzmacher's second year of getting a $1,895 MacWorld Platinum Pass free. IDG validated discount codes client-side by shipping 1,341 MD5 hashes to the browser; harvesting them from the registration page and inferring the 08-X-XXXXX vendor-code mask cuts the keyspace enough for a John the Ripper external filter to surface 08-S-STAFF in under a day.

Record

Researcher

Kurt Grutzmacher

In the archive

• Nominated for the 2008 Top 10 Web Hacking Techniques

Tags

• auth-bypass
• abuse-of-functionality
• javascript
• info-leak
• case-study
• owasp-a01-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Kurt Grutzmacher, first published at the original source. Preserved copies are kept so the citation survives its host.