Google Pay Exploit PoC

Google Pay methods are on MembersHandler, which is only installed on WebviewCard. This page must be escalated from the casino WebView via gaming NAV to access them.

Step 1: Verify Current Context

Step 2: Escalate to WebviewCard

Required for Google Pay
The casino WebView does NOT have MembersHandler. Gaming NAV opens this page in a WebviewCard which does.

Step 3: Google Pay — Check Support

Queries if Google Pay is available on this device. The response comes back via evaluateJavaScript to our callback function.

Step 4: Google Pay — Trigger Payment

Triggers the Google Pay payment sheet. Requires valid merchantId (format: merchant:gateway), amount in minor units (e.g. 100 = £1.00), and currency code.

Step 5: Complete Payment

After Google Pay returns a token, this confirms the deposit with bet365. In a real attack, the attacker would intercept the encrypted token.

Other MembersHandler Methods (Available After Escalation)