Bug Bounty : Account Takeover with IDOR vulnerability on live website
iSpeech.org
Get the Full Article on : https://catchthebugs.com/
In this video, I am have demonstrated you how to test for Insecure Direct Object Reference (IDOR) vulnerability in a web application.
IDOR vulnerability is found in an application when an internally implemented object is displayed to users without any kind of access control. The internally object can be a file, user ID or database key. Using those objects, the attacker may get other critical and unauthorized data. The attacker sometimes can even take over other user’s account.
IDOR vulnerability allows a hacker to get access to data of other users manipulating a registered user's account ID.
Disclaimer : This is just for demonstration, don’t use the website for bad purpose. If you damage or takeover someone’s account and cause any harm, you will be fully responsible for that.
2019-05-30 15:06:58
source
Gloss