IDOR with EXIF Vulnerability | Bug Bounty POC

#hacker #hack #hackers #hacking #bountytool
#hackingtools #bugbountytool # #programming
#python
#coder #bugbountypoc #bugbountyhunting #cybersecurity
#ethicalhacking #openbugbounty
#educationalfuzzer #bruteforce #bugbounty
#bugcrowd #hackerone
#eductionalvideo
#informationtechnology #informationsecurity

[@anuzravat]

what does exif have anything to do with vuln 😭, its obv any media will have meta data.. IDOR is crazy tho

[@ArnoShortz]

its the impact, it would be interesting to test other headers here

[@bugbouty]

nice

[@DerrikWrevok]

I always start with subdomain enum. Anyone smarter suggest better methodology? Thx. Also, sweet vid.

[@jitendrabehera2374]

Are they accept this bug and give you any bounty

[@sushil.choudhary_]

I got 500$ for it

[@rollups-]

yes

[@smmeurope]

no ımpact

[@mistDexploit]

so EXIF was for making the IDOR more dangerous, actually you increased the Impact of vulnerability with showing that you can find victim location that was nice, I enjoyed it

[@meedmexi3711]

اخلا دار بوه

[@杨志-w9h]

cool

[@thechannelofmine]

No impact

[@g0l0kget]

can u tell me why no impact? since theres no access control to view data another user

[@thechannelofmine]

@@g0l0kget The data being viewed already public and have no impact on the user or platform.

[@g0l0kget]

@@thechannelofmine isee , so theres only impact if he can change another user detail . is that it? sorry im still learning

[@thechannelofmine]

@@g0l0kget no, not only change, you need to GET sensitive users information not public ones.

[@g0l0kget]

@@thechannelofmine isee okay2 thanks