Security PlayBook

idor

9 items with this tag.

  • Aug 09, 2026

    Access Control Labs PortSwigger

    • access-control
    • idor
  • Aug 09, 2026

    Postbook

    • xss
    • idor
  • Aug 09, 2026

    05 - User ID controlled by request parameter

    • access-control
    • idor
  • Aug 09, 2026

    06 - User ID controlled by request parameter, with unpredictable user IDs

    • access-control
    • idor
  • Aug 09, 2026

    07 - User ID controlled by request parameter with data leakage in redirect

    • access-control
    • idor
  • Aug 09, 2026

    08 - User ID controlled by request parameter with password disclosure

    • access-control
    • idor
  • Aug 09, 2026

    09 - Insecure direct object references

    • access-control
    • idor
  • Aug 09, 2026

    10 - URL-based access control can be circumvented

    • access-control
    • idor
  • Aug 09, 2026

    Loose Lips

    • idor

Recent Notes

  • Micro-CMS v1

    Aug 09, 2026

    • sql-injection
    • xss
  • Petshop Pro

    Aug 09, 2026

    • Postbook

      Aug 09, 2026

      • xss
      • idor

    Created with Quartz v5.0.0 © 2026

    • GitHub
    • Parhamf6