Case Study: IDOR via Predictable Username Generation

Interesting case study by @nahamsec on HackingHub: https://app.hackinghub.io/hubs/ghost-api

Watch the video here: