0

I am black-box testing a video streaming website. They have 2 kind of IDs for videos. internal_id and external_id.

I need to find a way to enumerate internal_id but cannot guess what kind of ID this website is using.

Example:

video 1: internal_id=GRZXW5EDY, external_id=727639
video 2: internal_id=GR9PWW4V6, external_id=727641
video 3: internal_id=G6Q40X1ER, external_id=732513
video 4: internal_id=GYJQ842W6, external_id=732517
video 5: internal_id=GRE584Q36, external_id=732519

My current observations:

  • internal_id always start with G
  • It seems like internal_id is id for all kind of objects in database, while external_id is id for video object alone

It looks like that internal_id always start with G and always in uppercase

trieulieuf9
  • 31
  • 4
  • 2
    The internal_id values can be base64 decoded to 7 bytes. It might be easier to look for a pattern in or try to understand the decoded values. – hft Sep 29 '21 at 18:27

0 Answers0