Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

How did I test the IDOR vulnerability that leads to all user Data leakage? 1:Change the /me endpoint to /users. 2.Change the GET method to the POST method. 3.Add the Content-Type: application/json header. 4.Add this payload to the HTTP request body. {"ids":["1"]} #bugbountytips

Aydin Naserifard

1,737 subscribers

41,448 views • 3 years ago •via X (Twitter)

Science & Technology Education #bugbountytips

Anya Rossi• Live Now

Private livecam show

8 Comments

st0x_r03 years ago

Hey bro, how did you find out about this loophole?🤔🤔

Aydin Naserifard3 years ago

the rest, you know. Just for point number 4, there was no ids parameter, which should have been seen in the response with the /users or /me endpoints. I tried the hit-and-trial method.

ashu (logic-cracker)1 year ago

reallly nice thank you bro really appreaciated .........

0xm1racle3 years ago

Im curious how this vulnerability occured

Aydin Naserifard3 years ago

the rest, you know. Just for point number 4, there was no ids parameter, which should have been seen in the response with the /users endpoint. I tried the hit-and-trial method.

Md. Amin Ullah Sheikh3 years ago

Great bro

huntk1ng3 years ago

@SaveToNotion #tweets #idor

tjmald3 years ago

@SaveToNotion #Tweet #idor

Related Videos

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

Web Security Academy

26,360 views • 1 year ago

SAMSUNG USER I FOUND A WAY TO EMBED VIDEO 😭😭😭 1. click post video 2. change the ' to twitter 3. post

SAMSUNG USER I FOUND A WAY TO EMBED VIDEO 😭😭😭 1. click post video 2. change the ' to twitter 3. post

red 🍿 dbte era

1,153,639 views • 2 months ago

The method is simple: 1 Start with simple ingredients. 2 Build a brand people trust over decades. 3 Sell company to a financial party that maximizes profit over all. 4 Slowly over time add ingredients that hyper-palliative, addictive and injurious to health. Taste test:

Brian Roemmele

110,960 views • 1 year ago

You can turn on the "Agent mode" of Gemini Code Assist to make it 10x better This enables Gemini to use tools and even MCPs: 1. Press Ctrl/Cmd+Shift+P 2. Type "Open User Settings (JSON)" and select it 3. Add this line to the file: "geminicodeassist.updateChannel": "Insiders" 4. Save and click on the reload button That's it!

You can turn on the "Agent mode" of Gemini Code Assist to make it 10x better This enables Gemini to use tools and even MCPs: 1. Press Ctrl/Cmd+Shift+P 2. Type "Open User Settings (JSON)" and select it 3. Add this line to the file: "geminicodeassist.updateChannel": "Insiders" 4. Save and click on the reload button That's it!

Paul Couvert

143,760 views • 1 year ago

Did you know that you can change an image by asking Grok imagine ? In the example, I made two changes: 1. I asked to change the background. 2. I asked to change the eye color.

Did you know that you can change an image by asking Grok imagine ? In the example, I made two changes: 1. I asked to change the background. 2. I asked to change the eye color.

Déborah

1,657,812 views • 1 year ago

How to “fix” the Spotify logo in iOS 1. Download the logo 2. Open Shortcuts 3. Click + to add a new 4. Add the Open (App) action 5. On the (App) and select Spotify 6. Dropdown menu > Rename 7. Dropdown menu > Add To Home Screen 8. Switch to Image and select the downloaded photo

éric salinas 💜✝️

35,188 views • 2 months ago

In 1986, Brian Tracy reveals the method that allows you to bend reality itself: “If you want to change your life, change your. . .”

In 1986, Brian Tracy reveals the method that allows you to bend reality itself: “If you want to change your life, change your. . .”

GrindBuddy

86,884 views • 1 year ago

A new toolbox loading method will be added to etaHEN 2.1B, this method should be 20x more stable than the current method and will only take up to 10 secs to re-add the toolbox WITH kstuff active, down from 2 mins. here's a preview on 4.03

A new toolbox loading method will be added to etaHEN 2.1B, this method should be 20x more stable than the current method and will only take up to 10 secs to re-add the toolbox WITH kstuff active, down from 2 mins. here's a preview on 4.03

LM

21,212 views • 1 year ago

Use mpp dot dev guides upgrade-x402.md as reference. Add mppx to my existing x402 server. Use the Tempo payment method with USDC. Keep the same pricing and route structure. Add mppx.charge to each paid endpoint. Point out areas where I could benefit from adding sessions.

Use mpp dot dev guides upgrade-x402.md as reference. Add mppx to my existing x402 server. Use the Tempo payment method with USDC. Keep the same pricing and route structure. Add mppx.charge to each paid endpoint. Point out areas where I could benefit from adding sessions.

Georgios Konstantopoulos

16,319 views • 4 months ago

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,718 views • 1 year ago

They didn’t want to add deadzones to Black ops 1 & 2… so I did. Link in the replies!

They didn’t want to add deadzones to Black ops 1 & 2… so I did. Link in the replies!

Rara

157,515 views • 1 month ago

Reporter: The US company could change the algorithm to push different content? Vance: The US company will have control on how the algorithm pushes content to users.

Reporter: The US company could change the algorithm to push different content? Vance: The US company will have control on how the algorithm pushes content to users.

Acyn

46,703 views • 10 months ago

This is the fastest way to edit any pictures using English. This is the first app I've seen supporting voice-controlled AI editing. I'm using the Genspark mobile app here, with their newly released Photo Genius feature. You can see how fast this works in the video below. Here is what I did: 1. I asked the agent to change my outfit to a suit 2. I asked it to make me wear a baseball hat 3. I asked it to make me smile 4. I asked it to change the background 5. I asked to show an old lady walking by

This is the fastest way to edit any pictures using English. This is the first app I've seen supporting voice-controlled AI editing. I'm using the Genspark mobile app here, with their newly released Photo Genius feature. You can see how fast this works in the video below. Here is what I did: 1. I asked the agent to change my outfit to a suit 2. I asked it to make me wear a baseball hat 3. I asked it to make me smile 4. I asked it to change the background 5. I asked to show an old lady walking by

Santiago

90,760 views • 10 months ago

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability! Try this out for yourself in our CL.TE lab:

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability! Try this out for yourself in our CL.TE lab:

Web Security Academy

27,978 views • 1 year ago

Still using Game Design Documents as a solo indie dev? This is how the cool kids are designing indie games now: 1. Add your game to the database 2. Pick from references 3. Add your twist 4. Download the Godot assets 5. Profit Get the Ludonaut Gameplay Library, link below:

Still using Game Design Documents as a solo indie dev? This is how the cool kids are designing indie games now: 1. Add your game to the database 2. Pick from references 3. Add your twist 4. Download the Godot assets 5. Profit Get the Ludonaut Gameplay Library, link below:

Ludonauta

457,086 views • 1 month ago

this is the EASIEST method to build a viral app on your first try. 1. search for existing apps on t:)ktok 2. look at viral vids 3. build the viral feature 4. add your own twist after i’ve seen the SAME viral feature in 3 different couple apps today. are you doing this?

this is the EASIEST method to build a viral app on your first try. 1. search for existing apps on t:)ktok 2. look at viral vids 3. build the viral feature 4. add your own twist after i’ve seen the SAME viral feature in 3 different couple apps today. are you doing this?

Simone Canc

76,085 views • 8 months ago

This is the basic practice method that helped me get to a plus handicap

This is the basic practice method that helped me get to a plus handicap

Jon Sherman

70,765 views • 1 year ago

Why did the Auschwitz death toll change from 4 million to 1 million?

Why did the Auschwitz death toll change from 4 million to 1 million?

Noah’s Ark 🚢

22,285 views • 3 months ago