What a Single File Name Taught Me About IDOR (PortSwigger Lab)

My transcript downloaded as 2.txt. That was the entire vulnerability, sitting right there in a file...