This write-up is about how I found an IDOR that allowed me to download private content

Target, domains, API keys, bearer tokens, SSO IDs, and organisation names are redacted. This writeup is for educational purposes and…

Introduction

Introduction

Your Mission

We often look at security bugs through the lens of broken code syntax or memory leaks. But some of the most expensive vulnerabilities in…

INTRODUCTION

Yesterday was all about XSS. Today, I spent most of my time diving into IDOR (Insecure Direct Object References) and Broken Access Control…

Access control is the most boring topic in tech, right up until one bad setting leaks thousands of people’s private data. AWS S3 makes…

When we talk about hunting for Remote Code Execution (RCE), we usually look at the file upload components or the main input fields of an…