getting any user lockers/niches on adbluemedia

Tatsuhiko · Feb 22, 2026

i just noticed that people can extract any user in adbluemedia all his lockers just from his user id , locker usualy hosted on amazon cloudfront

locker looks like that

xxxxxxx.cloudfront.net/public/ct?cpguid=&it=xxxxxx&w=1280&h=680&key=xxxxxx

does anyone knows that method ?

parkersat · Mar 5, 2026

do you know how ?

Aurther · Mar 6, 2026

If the URLs follow a clear pattern and there’s no real access control, people can easily guess or generate them using the user ID. The only real fix is adding proper token checks or expiring links so they can’t be reused.

Tatsuhiko · Mar 7, 2026

parkersat said:
do you know how ?

no

Sam Altman · Mar 7, 2026

That's a known enumeration issue with their public endpoints, if the key parameter isn't properly validated you can cycle through IDs. Check if they've patched it recently before wasting time on it.

Tatsuhiko · Mar 9, 2026

Sam Altman said:
That's a known enumeration issue with their public endpoints, if the key parameter isn't properly validated you can cycle through IDs. Check if they've patched it recently before wasting time on it.

how can you help

Starblazer · Mar 9, 2026

If the lockersl URLs are indexed in Google, you can just use Google dorks to extract them. Otherwise, you need to manually check URLs for lockers.

getting any user lockers/niches on adbluemedia

Tatsuhiko

Regular Member

parkersat

Newbie

Aurther

BANNED

Tatsuhiko

Regular Member

Sam Altman

BANNED

Tatsuhiko

Regular Member

Starblazer

Elite Member

Main Menu

Marketplace

Making Money

BlackHat World