Let's break into payment gateways

1. Let's Break
into
Payment
Gateways
By Harsh Akshit

2. $ whoami?
- Harsh Akshit
- Co-organizer, GDG
Ranchi
- Security Analyst
Intern at Twimbit
- Google Hall of Fame

3. 01
Web applications using
PGs
Intro to Payment
Gateways
Analyzing Request &
Responses
02
03
04
05
Exploiting Payment
Gateways
Bonus information!06
Tips & Tricks

4. What is Payment Gateway ???

5. What is Payment Gateway ???
Source: razorpay

6. Few popular Payment Gateways:

7. Web Applications using Payment Gateways:
➔ E- Commerce
➔ Online entertainment
websites
➔ Travel websites
➔ Etc etc

9. That’s a lot of recon

10. How does a Payment Gateway works ???
➔ Request
➔ Response
➔ Order Placed

11. It’s time for hacking...

12. Different approach:
1. The Noob’s way
<input type=”hidden” name=”business” value=”abc@xyz.com”>
<input type=”hidden” name=”cmd” value=”_xclick”>
<input type=”hidden” name=”item_name” value=”Classmate_Notebook”>
<input type=”hidden” name=”amount” value=”550">
<input type=”hidden” name=”currency_code” value=”INR”>
Note: Refer to my blog for additional info

13. Different approach:
2. The hacker’s way
Note: Refer to my blog for additional info

14. Different approach:
3. The Pro hacker’s way
Note: Refer to my blog for additional info

15. Bonus Information!
Note: Refer to my blog for additional info

16. Bonus Information!
Note: Refer to my blog for additional info
★ Read the document and find some juicy stuffs like response
codes, API keys in github repo, hashing algorithm, etc etc
★ Try to manipulate quantity parameter
★ Full other parameters as well. For example:
→ Promo code
→ Wallet amount
→ Delivery Charges
Every parameter that revolves around money
🤑

17. THANKS!
harshakshit.bit@gmail.co
m
/harshakshit
/harshakshit
/marshmello_in