pentester.land· Sep 20, 2022· by apapedulimu / Nosa Shandy (@LocalHost31337)💰 Bounty: 3,000

Tag Myself in Your Favorite TikTok Artist Video [IDOR]

Open Original Article ↗
Target Program: TikTok
🎯 Vulnerability: Insecure Direct Object Reference (IDOR)
💡 Defense Fix: Enforce object-level access control checks (ABAC/RBAC) on the server side for every API request.
#IDOR

More Writeups Like This

dev.to

BOLA, the #1 API Vulnerability: a One-Line Fix and an A-B Test in Go and PHP

by ohugonnot
medium.com/tag/ctf-writeup

HTB OnlyHacks Walkthrough

by Amrik Hore
medium.com/tag/penetration-testing

IDOR Hunting Techniques Every Bug Bounty Hunter Should Know | by Samadhan Shimple

by Samadhan shimple
medium.com/tag/bug-bounty

Insecure Direct Object Reference (IDOR) — Unauthorized Product Price Modification

by MUWAFAK HELAL