How i got financial advisor by simply hack into their membership plan!

Hello Infosec geeks

As usual after wakeup and get natural things done 😂i fired up my burpsuite
and opened one old program in where I hunt few days ago

after wandering around for a while I got a membership plan button on their site from where we can hire a financial advisor.

Ohh yeah why not test this function?

They are using razorpay gateway to collect payments i clicked on pay function and got intercept that request and changed 39900 value to 1 ahha maybe they are checking some token value got error

Tried a few things for several minutes and then changed the 39900 passing value to 1000 I was like what 😮actual amount of 399 changed to 10 rupees

After sometime i got a call from my financial advisor hahaa
I laughed alot😂

Dec 11, 2021 : Reported

Dec13, 2021 : Triaged

Dec 27, 2021: Bounty rewarded

Thanks for reading:)
Stay safe at home

Connect with me on twitter
https://twitter.com/aadesh_namdevv

Do Follow Techiepedia for more Interesting write-ups.