Biidznillah, I was awarded a $5,000 bounty on
@Hacker0x01
!
a simple IDOR
❌ GET /api/v1/user/detail?type=1&user_id=123
✅ GET /api/v1/user/detail?type=0&user_id=123
alwys try changing the value if u find parameters similar to that (type, role, scene, etc.)
#bugbountytips