How a "Fixed" IDOR and an Empty String Led to 5 Million+ File Leaks
When I start looking at a target in finance, medical, etc, I always go for the most valuable data. In this case, on a major application we'll call "Redacted Corp," that meant file uploads. Invoices, personal documents, signatures... all the PII.
Part...
