BOLA: Enumerating an Entire Employee Directory Through a Predictable ID
By Sid — Cybersecurity Engineer & PentesterDisclosure note: This was found during an authorized, client-commissioned penetration test. The target platform, endpoint domain, employee names, and all captured values below have been anonymized/fictionalized — none of the identifiers, credentials,...