0x5t4l1n/hunting
1
0
Fork 0
mirror of https://github.com/0x5t4l1n/hunting.git synced 2026-05-26 19:36:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Restructure repository: Remove OWASP categorization, organize by vulnerability type

Browse Source 
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-01-04 19:01:04 +00:00
parent 274734e91a
commit ba72efbc5e
46 changed files with 341 additions and 323 deletions
Download Patch File Download Diff File Expand all files Collapse all files
IDOR/README.md
+17
View File
@@ -0,0 +1,17 @@
# IDOR (Insecure Direct Object References)
## Description
Insecure Direct Object References (IDOR) occur when an application provides direct access to objects based on user-supplied input. As a result, attackers can bypass authorization and access resources directly by modifying the value of a parameter used to point to an object.
## Common Attack Vectors
- URL parameters (IDs, usernames)
- API endpoints
- File references
- Database keys
- Session tokens
## Testing Approach
Manipulate object references (IDs, filenames, keys) to access unauthorized resources belonging to other users.
## Payloads
See `idor-payloads.txt` for a comprehensive list of IDOR testing techniques and payloads.