๐Ÿงช
LAB
INTERMEDIATE

Obfuscated & UUID Identifier Leakage IDOR in Document Vault

UNSOLVED
๐Ÿ“‚ CloudVault Enterprise Repo
Scenario 18

๐Ÿ“ก Enterprise Public Activity & Audit Feed

System-wide collaborative audit log and ingestion activity feed. Broadcasts real-time document transactions across departments. Available via REST API at GET /api/public/audit-feed.

๐Ÿ’ก Reconnaissance Insight: Audit log transactions contain Base64-encoded ingestion telemetry tokens with internal document metadata. Inspect the raw transaction events or consume the public API feed to discover hidden object parameters.
Timestamp Actor / Identity Transaction & Activity Details Tx Reference Telemetry Packet