Insecure Direct Object Reference (IDOR)
This article was originally published on SecJuice on January 27, 2019. Today I want to talk about one of my favourite vulnerabilities right up to where my knowledge gap begins, like you I am still learning and writing about the things I am learning about is my way of retaining the knowledge. Before jumping straight into a highly paid vulnerability, a quick word on authorization and authentication. Authentication lets the application know who is using an app, while authorization means the level of features you have and the level of actions you can perform. ...