Enumerate all the class codes via google dorking
High
Vulnerability Details
I used this particular google dork `site:khanacademy.org/join/*` to enumerate all the links of joining classes.
1. Go to google and use the above query to enumerate all of them.
2. Create the student account by filling all the required details
3. Now you're in the class without being actually invited by the teacher
Attached POC:
████████
## Impact
An attacker can enumerate all the classes and join in them and make chaos there are chances of IDOR too... a class code can look like `a57d5d5548f302ef4a` instead of `A45JST`
Actions
View on HackerOneReport Stats
- Report ID: 1210043
- State: Closed
- Substate: resolved
- Upvotes: 41