[FlowAr]

Just curious if it's possible.
Do you need to buy a product to decrease its price, or you could just exploit something in the wish.com to not pay at all??

[mothered]

Do you need to buy a product to decrease its price

Are you referring to editing the cost on their actual site?

That Is, back-end access?

[FlowAr]

@mothered, i meant decreasing a chosen product's price on the wish.com site itself.
Is there an exploit/abuse of this "price lowering" system that wish has?

[mothered]

@mothered, i meant decreasing a chosen product's price on the wish.com site itself.

You'll need back-end access to achieve this.

As with every site I compromise, research Is paramount, hence It's not possible to determine the attack and exploit vectors offhand.

[FlowAr]

@mothered, wish has quite shitty customer care obviously. It could be the same for their security
What if it's possible to exploit their system of price via multiple cracked accs???

[mothered]

What if it's possible to exploit their system of price via multiple cracked accs???

You need an understanding of how the back-end operates. It's way beyond the scope of this post to elaborate.

In very simple terms and briefly stated, to make the said changes, elevated privileges are required- Inclusive of manipulating the database for the entries to take effect. A "cracked account" obtained by way of end user authentication, has no relevance whatsoever.

[Tibo inc]

What if it's possible to exploit their system of price via multiple cracked accs???

You need an understanding of how the back-end operates. It's way beyond the scope of this post to elaborate.

In very simple terms and briefly stated, to make the said changes, elevated privileges are required- Inclusive of manipulating the database for the entries to take effect. A "cracked account" obtained by way of end user authentication, has no relevance whatsoever.

I'm not certain, but I believe that wish has a "buy with a friend scheme" that lowers the price. I belive that is what the OP is referring too.

[mothered]

What if it's possible to exploit their system of price via multiple cracked accs???

You need an understanding of how the back-end operates. It's way beyond the scope of this post to elaborate.

In very simple terms and briefly stated, to make the said changes, elevated privileges are required- Inclusive of manipulating the database for the entries to take effect. A "cracked account" obtained by way of end user authentication, has no relevance whatsoever.

I'm not certain, but I believe that wish has a "buy with a friend scheme" that lowers the price. I belive that is what the OP is referring too.

It may well be the case. I'm responding to the following, which Is relative to server-side access.

decreasing a chosen product's price on the wish.com site itself.

[FlowAr]

I'm not certain, but I believe that wish has a "buy with a friend scheme" that lowers the price. I belive that is what the OP is referring too.

That's exactly what i mean.
I know this thing has a time counter(1-3 hours or so) for an offer, but any way to exploit it somehow???

[Tibo inc]

I'm not certain, but I believe that wish has a "buy with a friend scheme" that lowers the price. I belive that is what the OP is referring too.

That's exactly what i mean.
I know this thing has a time counter(1-3 hours or so) for an offer, but any way to exploit it somehow???

I personally don't really use wish so I have no knowledge of their workings regarding the friend scheme.