And this time, it’s Google Drive’s Information leakage bug 🙂

I’ve accidentally found an Insecure Direct Object Reference (IDOR) vulnerability on DailyMotion while helping my friend to manage his uploaded video 😉 A nice $700 bounty came up days after!

I’ve tried some ideas with the Youtube’s embed feature, and it resulted with a $500 sweet bounty!

Boring weekends? Let’s just hack something!