Tag feed

#idor

31 posts3 followers

Explore Hashnode

Alternatives

Trending tags this week

YPYogeshwar Peelaexploitnotes.hashnode.dev5d ago · 4 min read

TryHackMe: Corridor - Writeup

Overview Corridor is an easy TryHackMe box built around a single Flask/Werkzeug web app. The homepage presents an image of a corridor with thirteen clickable doors, each linking to a URL that is an MD

0

SSunnycybersecurity-learning.hashnode.devAug 11 · 11 min read

TryHackMe Corridor Beginner-Friendly Learning Guide

Introduction I recently completed the Corridor room on TryHackMe as part of my ongoing cybersecurity learning journey. This was a short room, but it introduced an important web application security co

0

YPYogeshwar Peelaexploitnotes.hashnode.devJul 13 · 8 min read

HackTheBox: NeoVault Challenge Writeup

Summary NeoVault is a small banking app (Next.js frontend + REST API) that lets users register, transfer funds, and download PDF statements. The API ships in two parallel versions, v1 and v2. v2 patch

0

JJebitoksharonjebitok.comJun 3 · 25 min read

API Pentesting (TryHackMe)

Link to the Walkthrough & Challenge on TryHackMe: API Pentesting Introduction An API (Application Programming Interface) is a structured interface that enables software components to communicate with

0

WBWiktoria Blomgren Strandbergpentesting-dvwa.hashnode.devMar 21 · 29 min read

API Security in DVWA

1 Introduction In this post, the API Security vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks across all security levels is to exploit weaknesses in

0

JJebitoksharonjebitok.comMar 5 · 6 min read

Love Letter Locker (TryHackMe) - IDOR

Lover Letter Locker is a Valentine's-themed web application that allows users to create and store love letters. The challenge description hints at privacy concerns with "For your eyes only?" - suggest

0

CCyberFreak999cyberfreak.hashnode.devFeb 22 · 4 min read

How to Test for IDOR Vulnerabilities

You log into a web app to download your invoice. The URL looks harmless: https://example.com/invoice?id=4521 Out of curiosity, you change the number to 4520. You suddenly see someone else’s invoice.

0

JJebitoksharonjebitok.comJan 10 · 20 min read

OWASP Top 10 2025: Application Design Flaws (TryHackMe)

After exploring IAAA (Identity, Authentication, Authorization, and Accountability) failures in the previous room, I moved on to what many consider the most challenging category of vulnerabilities to fix: Application Design Flaws. Unlike authenticatio...

0

NSNull Sirynctfs.hashnode.devJan 1 · 4 min read

Multifactorial CTF Writeup: Bypassing MFA via WebAuthn Exploit

Challenge Description Category: Web exploitationAuthor: thee2d Modern authentication relies on more than just a password. Something you know, something you have, and something you are. Together, they're meant to provide layered security that can with...

0

NSNull Sirynctfs.hashnode.devJan 1 · 5 min read

Kramazon CTF Writeup: Cookie Forgery & IDOR Exploit

Challenge Description Category: Web exploitationAuthor: thee2d Intelligence analysts from the North Pole Logistics Directorate (NPLD) have uncovered a covert online storefront operated by the KRAMPUS Syndicate. Its name? Kramazon. Looks familiar. Wor...

0

#idor

Search Hashnode

#idor

Explore Hashnode

Trending tags this week

TryHackMe: Corridor - Writeup

TryHackMe Corridor Beginner-Friendly Learning Guide

HackTheBox: NeoVault Challenge Writeup

API Pentesting (TryHackMe)

API Security in DVWA

Love Letter Locker (TryHackMe) - IDOR

How to Test for IDOR Vulnerabilities

OWASP Top 10 2025: Application Design Flaws (TryHackMe)

Multifactorial CTF Writeup: Bypassing MFA via WebAuthn Exploit

Kramazon CTF Writeup: Cookie Forgery & IDOR Exploit