Other nomination

All Your Google Docs are Belong To US...

Billy Rios

A Google Docs session-management flaw: GET /Dialogs/EmailDocument never checked whether the caller owned the requested DocID, and a follow-up POST to /MiscCommands with a swapped docid emailed any user's document to an attacker address. Rios also shows the DocID suffix increments in rapid succession, making enumeration practical.

Record

Researcher

Billy Rios

In the archive

• Nominated for the 2007 Top 10 Web Hacking Techniques

Tags

• idor
• auth-bypass
• info-leak
• email
• http
• case-study
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Billy Rios, first published at the original source. Preserved copies are kept so the citation survives its host.