WRITEUP #1472

How a simple IDOR impacted the data of thousands of customers of an Indian automotive giant

Auth BypassAccount takeoverInformation disclosureIDOR

byKushal Jain

Program

Published

Mar 1, 2023

Added to HackDex

Mar 6, 2023

Read Full Writeuphttps://medium.com/@kushjain0107/how-simple-idor-impacted-the-data-of-thousands-of-customers-of-an-indian-automotive-giant-fdbd2ef1c2c6

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System

ReconMissing authentication

Forced SSO Session Fixation

Auth BypassSSO

Account takeover on 8 years old public program

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat