diff --git a/Insecure Direct Object References.md b/Insecure Direct Object References.md index 58525ec..d958bec 100644 --- a/Insecure Direct Object References.md +++ b/Insecure Direct Object References.md @@ -105,5 +105,14 @@ Try this to bypass GET /ADMIN/profile ``` +11. Try to swap uuid with number +``` +GET /file?id=90ri2-xozifke-29ikedaw0d +``` +Try this to bypass +``` +GET /file?id=302 +``` + Reference: -- [@swaysThinking](https://twitter.com/swaysThinking) and other medium writeup \ No newline at end of file +- [@swaysThinking](https://twitter.com/swaysThinking) and other medium writeup