📁 DocVault Document Management

Secure Corporate Document Repository

📄 Document Access Request

Document ID:

adm_3b7f2a8c-4e9d-1a2b-8f6e-9c8d7e6f5a4b

Document Type: Administrative

Classification: CONFIDENTIAL

Owner: System Administrator

Created: 2024-01-01 00:00:00

Last Modified: 2024-01-15 14:30:22

File Size: 2.4 MB

Access Level: Admin Only

Encryption: AES-256

Backup Status: Synced

🔐 Classified Document Content

Document Title: "Master Security Protocol"

Access Token:

FLAG{c0mpl3x_1d_cr4ck3d_2024}

Document Contents:

  • System architecture diagrams
  • Security key rotations schedule
  • Emergency response procedures
  • Administrator contact list
🧩 UUID Pattern Analysis

The system uses UUIDs with specific prefixes:

  • usr_ prefix for user documents
  • adm_ prefix for administrative documents
  • Standard UUID v4 format after prefix
  • Pattern: prefix_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Current Document: adm_3b7f2a8c-4e9d-1a2b-8f6e-9c8d7e6f5a4b

🎯 Hunter Objective:
🔧 Test Different Document IDs:
User Doc: usr_3b7f2a8c-4e9d-1a2b-8f6e-9c8d7e6f5a4b Admin Doc: adm_3b7f2a8c-4e9d-1a2b-8f6e-9c8d7e6f5a4b User Doc: usr_12345678-1234-1234-1234-123456789abc Admin Doc: adm_12345678-1234-1234-1234-123456789abc
🚨 Complex identifier IDOR vulnerability | Let's Jam Training Platform