Lerhan: Bypassing IDOR protection with URL shorteners
Xavier Blasco (a.k.a Lerhan) is a 23-year old security researcher on the Detectify Crowdsource Platform. He’s passionate about security and found a way in through …
IDOR
[PoC Video] jQuery-File-Upload: A tale of three vulnerabilities
TL;DR Three vulnerabilities in the second most starred Javascript repository on Github which two of them are remote code execution and the third makes it …
OWASP TOP 10: Insecure Direct Object Reference
Fourth one on the list is Insecure Direct Object Reference, also called IDOR. It refers to when a reference to an internal implementation object, such as a file or database key, is exposed to users without any other access control. In such cases, the attacker can manipulate those references to get access to unauthorized data.
OWASP Top 10 Vulnerabilities Explained
OWASP is a non-profit organization with the goal of improving the security of software and internet. They have put together OWASP Top 10, a list of the ten most common vulnerabilities to spread awareness about web security. In this post, we have gathered all our articles related to OWASP and their Top 10 list. If you’d like to learn more about web security, this is a great place to start!