Google- Multiple Account Creation Bug [Write-up & Video]

Steps to reproduce bug:

1. Go to https://accounts.google.com/SignUpMobile

2. Enter your mobile number and click "Next". You will receive a message on your phone. Open message and there would be a link like http://g.co/xxxx or http://g.co/gms/xxxx

3. Go to the link in computer's web browser and confirm the verification. Follow the steps and create a Google account.

For verification: Open new tab and go to http://mail.google.com . You will be logged into the the account that you've just created.

4. Now, hit back button twice or till you're back to "Choose your username" page.



Enter New Username->Password->Account Created.

Hit back button, Enter New Username->Password->Account Created. Repeat it again and again.

To make this process more easier, create a bot and run it with multiple threads :)

Video (POC):

Lumia 920 Reward From Nokia for SQL Injection Report

SQL Injection (POC):

Reward Confirmation: