When I pass phone number to username Param it was disclosing entity Id of user in response. I didn't guess algorithm , it was all there - Aditya Shende - Medium

What was the encryption algo through encrypt the id and how do u find what was the algorithm use to…

Ashisbanerjee

Jul 13, 2021

--

When I pass phone number to username Param it was disclosing entity Id of user in response. I didn't guess algorithm , it was all there

Aditya Shende

Written by Aditya Shende

#kongsec | Solo Bounty Hunter | Function Exploits and Report Crafting | Bikes | Not a XSS guy | Own views | Bugcrowd Top 100 l Top 10 P1 warriors | Biker

Recommended from Medium

Maneesha Erandi

Implementing a Convex Bottom Navigation Bar in Flutter

convex_bottom_bar flutter package makes creating a convex bottom navigation bar really easy. This package also earned it’s place among…

4 min readJan 24

--

Viktor Mares

Code Injection via Python Sandbox Escape — how I got a shell inside a network.

Hi Everyone,

5 min readFeb 7

--

Lists

Staff Picks

323 stories82 saves

Stories to Help You Level-Up at Work

19 stories52 saves

Self-Improvement 101

20 stories101 saves

Productivity 101

20 stories109 saves

An airdrop crate with a parachute on a dark blue background with several logos of cryptocurrencies on the right and left of the picture.

Pantera
in
The Crypto Kiosk

Here’s How To Earn Cryptocurrency In 2023 With No Investment

Fill Your Crypto “Bags” With “Free Crypto” And Hold As The Next Bull Run Begins

12 min read6 hours ago

--

Aditya Shende

Finding Time Based SQLi injections : Edition 2023

Hi everyone,

4 min readJan 6

--

Rafael Silva "lopseg"

Digging Deeper: Unearthing Business Logic Vulnerabilities in Advanced Web Applications

Business logic vulnerabilities in web applications are often elusive, misunderstood, and overlooked in standard security auditing. They are…

4 min readMay 20

--

Swapmaurya

3 Step IDOR in HackerResume

Before moving forward with this blog if you don’t have any context over what IDOR is you can refer the same over here

5 min readDec 3, 2022

--

See more recommendations

Help
Status
Writers
Blog
Careers
Privacy
Terms
About
Text to speech