The document introduces payment gateways and provides tips for exploiting them. It explains that payment gateways are used by e-commerce, entertainment, and travel websites to process online transactions. The document outlines different approaches hackers can take to exploit payment gateways, from simple to more advanced techniques. It encourages analyzing request and response data, looking for API keys, hashing algorithms, and manipulating transaction parameters like quantity, promo codes, wallet amounts, and delivery charges.

1. Let's Break
into
Payment
Gateways
By Harsh Akshit

2. $ whoami?
- Harsh Akshit
- Co-organizer, GDG
Ranchi
- Security Analyst
Intern at Twimbit
- Google Hall of Fame

3. 01
Web applications using
PGs
Intro to Payment
Gateways
Analyzing Request &
Responses
02
03
04
05
Exploiting Payment
Gateways
Bonus information!06
Tips & Tricks

4. What is Payment Gateway ???

5. What is Payment Gateway ???
Source: razorpay

6. Few popular Payment Gateways:

7. Web Applications using Payment Gateways:
➔ E- Commerce
➔ Online entertainment
websites
➔ Travel websites
➔ Etc etc

9. That’s a lot of recon

10. How does a Payment Gateway works ???
➔ Request
➔ Response
➔ Order Placed

11. It’s time for hacking...

12. Different approach:
1. The Noob’s way
<input type=”hidden” name=”business” value=”abc@xyz.com”>
<input type=”hidden” name=”cmd” value=”_xclick”>
<input type=”hidden” name=”item_name” value=”Classmate_Notebook”>
<input type=”hidden” name=”amount” value=”550">
<input type=”hidden” name=”currency_code” value=”INR”>
Note: Refer to my blog for additional info

13. Different approach:
2. The hacker’s way
Note: Refer to my blog for additional info

14. Different approach:
3. The Pro hacker’s way
Note: Refer to my blog for additional info

15. Bonus Information!
Note: Refer to my blog for additional info

16. Bonus Information!
Note: Refer to my blog for additional info
★ Read the document and find some juicy stuffs like response
codes, API keys in github repo, hashing algorithm, etc etc
★ Try to manipulate quantity parameter
★ Full other parameters as well. For example:
→ Promo code
→ Wallet amount
→ Delivery Charges
Every parameter that revolves around money
🤑

17. THANKS!
harshakshit.bit@gmail.co
m
/harshakshit
/harshakshit
/marshmello_in