---
title: "Discussion on \"IDOR - Santa’s Little IDOR | Advent of Cyber | TryHackMe\" | Hashnode"
description: "Discussion on \"IDOR - Santa’s Little IDOR | Advent of Cyber | TryHackMe\". Learning Objectives\n\nUnderstand the concept of authentication and authorization\n\nLearn how to spot potential opportunities for Insecure Direct Object References (IDORs)\n\nExploit IDOR to perform horizontal privilege escalation\n\nLearn how to turn IDOR ..."
url: "https://hashnode.com/posts/idor-santas-little-idor-advent-of-cyber-tryhackme/693449c06a12a50c409c30fe"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [IDOR - Santa’s Little IDOR | Advent of Cyber | TryHackMe](https://starting-out-in-cybersec.hashnode.dev/idor-santas-little-idor-advent-of-cyber-tryhackme?utm_source=hashnode&utm_medium=feed)

Learning Objectives Understand the concept of authentication and authorization Learn how to spot potential opportunities for Insecure Direct Object References (IDORs) Exploit IDOR to perform horizontal privilege escalation Learn how to turn IDOR ...

Dec 6, 2025 · 3 min read · starting-out-in-cybersec.hashnode.dev  
Read the article

-   [#adventofcyber2-25](https://hashnode.com/tag/adventofcyber2-25)
-   [#tryhackme](https://hashnode.com/tag/tryhackme)
-   [#tryhackme-walkthrough](https://hashnode.com/tag/tryhackme-walkthrough)
-   [#tryhackmewalkthrough](https://hashnode.com/tag/tryhackmewalkthrough)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#cybersecurity-1](https://hashnode.com/tag/cybersecurity-1)
-   [#cybersec](https://hashnode.com/tag/cybersec)
-   [#cyber-security](https://hashnode.com/tag/cyber-security)
-   [#pentesting](https://hashnode.com/tag/pentesting)
-   [#hashnode](https://hashnode.com/tag/hashnode)
-   [#adventofcyber2025](https://hashnode.com/tag/adventofcyber2025)
-   [#idor](https://hashnode.com/tag/idor)

## Written by

[Vivek Redhu](https://hashnode.com/@Vee-Sec)

@Vee-Sec · Dublin, IE

  
[View profile](https://hashnode.com/@Vee-Sec)

What can be broken can be understood. What can be understood can be secured.

Hi, I’m Vivek — also known as Vee-Sec. Currently pursuing a Master’s in Cybersecurity in Dublin, with graduation expected in Jan 2027. I document my CTF writeups and findings here.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.