WRITEUP #3516

How I found read/write access to the personal data of 3 million users of an E-commerce website?

IDOR

byPrashant Singh / SecGeek_one0one

Program

Published

Aug 13, 2021

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://medium.com/@psr595bro/how-i-found-read-write-access-to-the-personal-data-of-3-million-users-of-an-e-commerce-website-b9026b0d4bd3

▸ RELATED WRITEUPS

Zomatoooo! IDOR in Saved Payments

IDOR

How I got my first $13500 bounty through Parameter Polluting (HPP)

IDORXSS

The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover

APIGraphQL

A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel

IDORBroken Access Control

Bypassing ACLs – IDOR exploitation via HPP

IDORHTTP parameter pollution

Built with ❤️ by Shubham Rawat