CopyPasta

Level: Easy Points: 10 Type: Daily Challenge

Lab Interface

We have option to create new snippet

Key thing here is the ability to make our new snippet private/public. This feature gives us idea about possible IDOR vuln.

To check this, I created another account. In the 1st account I created a private snippet and from 2nd account I was able to view it.

bug{8i9A3cgr4kq2FOgDGGjhBKcayrZUuhsS}