August 22, 2026

Google Classroom IDOR Vulnerability POC Video

A few days ago, I shared a write-up about an IDOR vulnerability I discovered in Google Classroom.

By Marrij Ali Khan

After publishing it, quite a few people asked me to upload a POC video.

So, here it is.

YouTube Video PoC: https://youtu.be/aHZPMXQb0Nk?si=JSVlO2wpEhB83i4i

The video demonstrates how the vulnerable request could be manipulated and how the authorization issue allowed access to an object that shouldn't have been accessible.

If you want to see the full discovery and technical walkthrough, check out my previous write-up:

https://infosecwriteups.com/how-i-found-an-idor-in-google-classroom-on-day-3-of-my-hunting-abffd039406c