IDor in Vodafone Egypt Free unlimted Internet and calls minutes
Firstly Dont try this At Home :D
i was testing the new feature in vodafone "customize your gifts"
its allows you to select what you need minutes or internet mega and the time
5 Min later ...
And Boom I Found IDOR
the backend didnt validated the request params
firstly i tried to change Param3 to 0.0 to take the offer for free
and its completed successfully
then i traied to change the param2 "its the units of offer" to take big number of units for free :"D
and its completed successfully bardo :"D
5Min later ...
and i was have more than 1 million of units to use in internet or calls
Thanks for reading
and i wish you a Good Day