Back to directory
WRITEUP #3438

IDOR Vulnerability In GraphQL Api On Website

IDORGraphQL
byAidil Arief
Program
-
Published
Sep 3, 2021
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://aidilarf.medium.com/idor-vulnerability-in-graphql-api-on-website-bc45e050d1d3
RELATED WRITEUPS
The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover
APIGraphQL
Zomatoooo! IDOR in Saved Payments
IDOR
Authorization bypass due to cache misconfiguration
APIAuthorization bypass
How I got my first $13500 bounty through Parameter Polluting (HPP)
IDORXSS
A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel
IDORBroken Access Control

Built with ❤️ by Shubham Rawat