---
title: "Discussion on \"IDOR Fallout: Leaking 2 Million Sensitive Files with a Simple Trick\" | Hashnode"
description: "Discussion on \"IDOR Fallout: Leaking 2 Million Sensitive Files with a Simple Trick\". When you see a public bug bounty program that has been running for over a decade, the assumption is usually that it's been picked completely clean. Every obvious endpoint has been hammered, and every"
url: "https://hashnode.com/posts/idor-fallout-leaking-2-million-sensitive-files-with-a-simple-trick/69999fbda20b74e093ef8698"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [IDOR Fallout: Leaking 2 Million Sensitive Files with a Simple Trick](https://n1ghtm4r3.hashnode.dev/idor-fallout-leaking-2-million-sensitive-files-with-a-simple-trick?utm_source=hashnode&utm_medium=feed)

When you see a public bug bounty program that has been running for over a decade, the assumption is usually that it's been picked completely clean. Every obvious endpoint has been hammered, and every

Feb 21 · 8 min read · n1ghtm4r3.hashnode.dev  
Read the article

-   [#bugbounty](https://hashnode.com/tag/bugbounty)
-   [#bugbountytips](https://hashnode.com/tag/bugbountytips)
-   [#hacking](https://hashnode.com/tag/hacking)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)

## Written by

[0xryz](https://hashnode.com/@0x0ryz)

@0x0ryz · Cairo

  
[View profile](https://hashnode.com/@0x0ryz)

Hacking stuff for a living.

Hey, I’m 0xryz - a full-time bug bounty hunter and security researcher based in Egypt.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.