Back to directory
WRITEUP #3882

How I was able to see likes and dislikes count even though is hidden by victim | YouTube #1

IDORBroken Access Control
by@Rando02355205(R ando)
Program
Google
Published
Mar 28, 2021
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://bloggerrando.blogspot.com/2021/03/bug-bounty-like-and-dislike-count.html
▸ RELATED WRITEUPS
A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel
IDORBroken Access Control
Zomatoooo! IDOR in Saved Payments
IDOR
How I got my first $13500 bounty through Parameter Polluting (HPP)
IDORXSS
The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover
APIGraphQL
Vestaboard: Exploring Broken Access Controls and Privilege Escalation
Privilege EscalationBroken Access Control

Built with ❤️ by Shubham Rawat