Poc of IDOR worth $1250🤑 | Bug Bounty | Hackerone

IDOR poc for which researcher got 1250$
#bugbounty #writeup #bugbountytips
.
.
.
.
.
.
.
.
.
.
.
.
.
.
Related searches
bug bounty
bug bounty writeups
bug bounty for beginners
bug bounty poc
bug bounty hunting
bug bounty for beginners
how to get started in bug bounty
hackerone bug bounty
bug bounty reports explained
bug bounty methodology
bug bounty course
poc bug bounty
bug bounty poc disclosure
bug bounty explained in hindi
bug bounty tutorial
bug bounty live
bug bounty tips
bug bounty poc 2021
idor bug bounty poc
bug bounty beginners
bug bounty explained
bounty,bug bounty in hindi
xss bug bounty
bug bounty tips

[@HackerEldee]

first understand how the bug works, you will definitely find them. Nice finding bro

[@breakoutgaffe4027]

Sick 🔥 🔥

[@nehamartand7499]

Good one!

[@shantanubharadwaj1849]

good shit ! 😉

[@SolitaryElite]

good info disclosure xd

[@newbiejember9854]

nice one

[@ClashWithHuzefa]

Nice

[@WasiLi0x1e]

nice

[@parwatsingh677]

Thank you 🙏👍

[@user-kv7xp2ty8e]

2021😄

[@shubhambajaj4939]

did you find this bug?

[@abdullahjaved2371]

How does an email disclosure award $1250 bounty??

[@amaliya6606]

Can you please send me the report?

[@mohitdisal1306]

explain it or give subtitles atleast

[@jaredelfaz2558]

it's just IDOR.

[@Frawkesish]

Step 1.. find a request that has a id value with a number.. make a second account and make the same request but this time you change the id number to be the same as the first account.. if it returns the info on the first account then you got a bug

[@Nik-lf4rw]

the fuck its really easy to understand lol

[@breakoutgaffe4027]

😂😂

[@bigmaster2404]

Impact?

[@biggusdickus8452]

Disclosure of user IDs, email address, potential ability to change comments on orders if you use the credentials you get from these. You may also be able to get an admin account email and id if you search all comments.

[@sangekolose3086]

Anybody willing to help on my first

[@chessplayer8551]

judgeme

[@noobsixt9]

nice one

[@Letshack001]

Thanks