WRITEUP #5834

#BugBounty — How Naaptol (India’s popular home shopping company) Kept their Millions of User Data at Risk!

IDOR

by@logicbomb_1(Avinash Jain)

Program

Naaptol

Published

Sep 7, 2018

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://medium.com/@logicbomb_1/bugbounty-how-naaptol-indias-popular-home-shopping-company-kept-their-millions-of-user-data-e414cd4151c

▸ RELATED WRITEUPS

Zomatoooo! IDOR in Saved Payments

IDOR

How I got my first $13500 bounty through Parameter Polluting (HPP)

IDORXSS

The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover

APIGraphQL

A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel

IDORBroken Access Control

Bypassing ACLs – IDOR exploitation via HPP

IDORHTTP parameter pollution

Built with ❤️ by Shubham Rawat