Back to directory
WRITEUP #6554

UUID Swap: I Almost Gave Up on This IDOR

IDOR
by@tinopreter(Clement (Tino) Osei-Somuah)
Bounty
$500
Published
Jan 28, 2026
Added to HackDex
Mar 9, 2026
Read Full Writeuphttps://medium.com/@tinopreter/500-for-a-uuid-swap-i-almost-gave-up-on-this-idor-ae7a0adb518d
▸ RELATED WRITEUPS
Zomatoooo! IDOR in Saved Payments
IDOR
How I got my first $13500 bounty through Parameter Polluting (HPP)
IDORXSS
The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover
APIGraphQL
A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel
IDORBroken Access Control
Bypassing ACLs – IDOR exploitation via HPP
IDORHTTP parameter pollution

Built with ❤️ by Shubham Rawat