[Z0MBies]

Title says all, i have successfully found an IDOR and Information Disclosure vulnerability in a company called 'Boozt' They are a REAL BIG company, all credits goes to me, cuz im the one who found and exploited this Vuln has been patched by now, POC:

https://z0mbys.livejournal.com/1482.html

[mothered]

Good find, a job well done In manipulating and bypassing the authorization and verification process.

When did the exploitation take place?

[Z0MBies]

Good find, a job well done In manipulating and bypassing the authorization and verification process.

When did the exploitation take place?

First of all, TY

Secondly, the exploitation took place a few months ago, the bug is already patched/fixed now.

[mothered]

Good find, a job well done In manipulating and bypassing the authorization and verification process.

When did the exploitation take place?

First of all, TY

Secondly, the exploitation took place a few months ago, the bug is already patched/fixed now.

You're welcome.

Seems they acted promptly with their corrective measures. Upon checking It out very briefly, It appears to have Insufficient (If any) Input data sanitization/filtering. I'll have an In depth look within the next couple of days.

Again, well done.

[Z0MBies]

Good find, a job well done In manipulating and bypassing the authorization and verification process.

When did the exploitation take place?

First of all, TY

Secondly, the exploitation took place a few months ago, the bug is already patched/fixed now.

You're welcome.

Seems they acted promptly with their corrective measures. Upon checking It out very briefly, It appears to have Insufficient (If any) Input data sanitization/filtering. I'll have an In depth look within the next couple of days.

Again, well done.

Hey man, you mind reviewing my hacking guide? If so, please hit me on Discord:

PC_Box#5447

[Z0MBies]

bumping this now for more people to see