bughunters-looker-studio-idor

star 0

Google VRP writeup por caesarevan23 — IDOR en Google Looker Studio (Data Studio) vía parámetro sourceReportId en el endpoint /persistTempReport. Acceso cross-account a templates ajenos sin validación de autorización. Recompensa $3,133.70. Segundo vector (Brutecat Ep.177) — leak de full name vía transferencia de ownership de reporte sin requerir aceptación del destinatario. Spanish triggers — "looker studio idor", "data studio idor", "persistTempReport", "sourceReportId idor", "google vrp idor looker", "datastudio idor", "idor template google", "broken access control looker studio", "looker studio full name leak", "ownership transfer leak google".

By omespino schedule Updated 6/4/2026

play_arrow Run Skill in Manus View GitHub

Skill instructions (SKILL.md) could not be loaded from local cache or raw GitHub repository.

Install via CLI

npx skills add https://github.com/omespino/ai_config --skill bughunters-looker-studio-idor

Repository Details

star Stars 0

call_split Forks 0

navigation Branch main

article Path SKILL.md