๐Ÿงช
LAB
INTERMEDIATE

Obfuscated & UUID Identifier Leakage IDOR in Document Vault

UNSOLVED
๐Ÿ“‚ CloudVault Enterprise Repo
Scenario 18

๐Ÿ“ My Protected Vault Documents

All files uploaded to CloudVault are encrypted and assigned unique 128-bit cryptographic UUIDs (Universally Unique Identifiers) to prevent sequential enumeration attacks.

๐ŸŽฏ Lab Objective:
You are logged in as Carlos. The Chief Security Officer recently uploaded a classified audit report using an unpredictable UUID. Inspect the Public Activity & Audit Feed (or REST API), decode the obfuscated ingestion telemetry token to recover the leaked executive document UUID, and exploit the IDOR vulnerability on the document viewer to capture the CTF flag.
Document Title Cryptographic System UUID Owner Clearance Actions