List: IDOR | Curated by Sagar Sajeev | Medium

Nov 15, 2022

17 stories

3 saves

IDOR

Eslam Akl

IDOR at Login function leads to leak user’s PII data

Vulnerable Login function leads to leaking PII data for all registered users.

Aug 30, 2022

IDOR at Login function leads to leak user’s PII data

Aug 30, 2022

This story is no longer available

Monish Basaniwal

The Million Dollar Hack 💰

Hacking a leading gift card company with a simple IDOR + Race condition

Aug 27, 2022

The Million Dollar Hack 💰

Aug 27, 2022

Ashutosh Sharma

IDOR leading to Privilege Escalation

Hello Folks, My name is Ashutosh and I am a Security Analyst. This is my first ever write-up so pardon me for any mistakes. Now back to…

Jun 21, 2020

Jun 21, 2020

This story is no longer available

In

InfoSec Write-ups

by

can1337

I mean, IDOR is NOT only about others ID

Hi folks! In this write-up, I’m going to talk about the vulnerability I found to broaden your perspective on IDORs.

Jul 22, 2022

I mean, IDOR is NOT only about others ID

Jul 22, 2022

Arth Bajpai

IDOR leads to 2fa Bypass

Hello Everyone my name is Arth Bajpai and , I’m back with my another writeup

Jan 17, 2022

IDOR leads to 2fa Bypass

Jan 17, 2022

Abdullah Mohamed

IDOR leads to leak medical insurance documents

Hi everyone, today I will talk about IDOR vulnerability that I found it in a insurance company that leaks the medical insurance documents…

Jul 16, 2021

IDOR leads to leak medical insurance documents

Jul 16, 2021

Gnana Aravind K

When an IDOR becomes EVIL > Total Data Leak😈

Hi fellow hackers and friends, This is Aravind here with another awesome article on how an IDOR bug helped me to access all user data of a…

Aug 3, 2022

When an IDOR becomes EVIL > Total Data Leak😈

Aug 3, 2022

Thái Vũ

Some ways to find more IDOR

Hello friend!

Jun 25, 2021

Some ways to find more IDOR

Jun 25, 2021

Rohit_443

IDOR on Password Change to Full Account Takeover.

Hello Everyone.

Apr 12, 2021

IDOR on Password Change to Full Account Takeover.

Apr 12, 2021

In

InfoSec Write-ups

by

Alp

How I found an IDOR issue in 5 mins?

Hi all! Since my last write-up, I’m not active on Medium! I really missed writing something about bug bounty!

Dec 13, 2021

How I found an IDOR issue in 5 mins?

Dec 13, 2021

Harish

How I made $$$ on an access control/ IDOR bug in few hours

Introduction:

Apr 18, 2021

How I made $$$ on an access control/ IDOR bug in few hours

Apr 18, 2021

Anonymous

How I Get $1350 From IDOR Just Less 1 hours

Assalamualaikum, wr,wb ,

Dec 23, 2021

How I Get $1350 From IDOR Just Less 1 hours

Dec 23, 2021

Karansh

How to find that BadAss IDOR

Hey there, my name is karan sharma. And i’m back with a story of IDOR and why i think you should know about it.

Apr 25, 2021

How to find that BadAss IDOR

Apr 25, 2021

In

PurpleBox Security

by

Yunus Emre SERT

The Ultimate Guide for Broken Authentication

This blog post was published on PurpleBox website on Dec 8th, 2021.

Dec 9, 2021

The Ultimate Guide for Broken Authentication

Dec 9, 2021

Damaidec

IDOR vulnerability on invoice and weak password reset leads to account take over

This year I started doing bug bounties and I only got valid p5 report and my report for p4 and p3 got rejected.

Feb 1, 2022

IDOR vulnerability on invoice and weak password reset leads to account take over

Feb 1, 2022

Sagar Sajeev
977 Followers
18 y/o | Security Researcher | Bug Bounty Hunter
Following
Tuhin Bose
Avinash Jain (@logicbomb)
Mohsin khan
Luke Stephens (@hakluke)
Sean (zseano)
See all (30)

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams