Didi taxi (xiaoju technology) is poorly designed and can lead to database hits (case studies)

Didi taxi (xiaoju technology) is poorly designed and can lead to database hits (case studies)

Didi taxi (xiaoju technology) is poorly designed and can lead to database hits (case studies)

 
  
* ***** Ukeji *****

 

There is no verification code for login, and there is no limit on the number of times ..

Packet Capture

Encrypted. The password is encrypted ..

However, there are pig teammates .. I tried to encrypt duang with the most common password.

Thus

Guess what the password is

 

Login successful. Well, there are still many companies.

Solution:

Strengthen verification mechanism