IDor in Vodafone Egypt Free unlimted Internet and calls minutes

Firstly Dont try this At Home :D

i was testing the new feature in vodafone "customize your gifts" 
its allows you to select what you need minutes or internet mega and the time 


5 Min later ... 
And Boom I Found IDOR 
the backend didnt validated the request params 


firstly i tried to change Param3 to 0.0 to take the offer for free  
and its completed successfully

then i traied to change the param2 "its the units of offer" to take big number of units for free :"D 
and its completed successfully bardo :"D

5Min later ...
and i was have more than 1 million of units to use in internet or calls 

Thanks for reading 
 and i wish you a Good Day




تعليقات