Fantastic Demos of Web Hacking featuring bug bounty hunter Justin Gardner!

Learn about IDOR, XSS and more.

YouTube video: youtu.be/KBIQE9fo8mU

Big thanks to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video.

#xss #bug #bounty #idor #hack #hacking #hacker #career

Alleged Data Breach Targets Spain’s Ministry of Science, Innovation, and Universities Threat actor GordonFreeman alleges a major Spain Ministry data breach via an IDOR vulnerability, exposing passports and academic records.

Full Article: www.technadu.com/alleged-data...

What lessons should governments take from recurring IDOR-related incidents?
Join the discussion 👇
#CyberSecurity #GovernmentIT #DataProtection #Spain #IDOR #Infosec

🚨 Alleged breach claims IDOR exploitation at Spain’s Ministry of Science
Sensitive PII reportedly exposed, including passports, DNI records & academic data.

#CyberSecurity #DataBreach #Spain #IDOR #Infosec

Taimi: Finding Everyone's Private Photos Was Easy, But So Was Getting Paid How I found critical IDOR vulnerabilities in Taimi that exposed

🔓 Found critical vulns in Taimi (LGBTQ+ dating app) - fixed, $10k bounty

- "Expiring" videos didn't expire
- Decrement ID = anyone's private videos

Taimi handled this right. Fast fix, proper bounty.

bobdahacker.com/blog/taimi-i...

#InfoSec #BugBounty #IDOR #Taimi #Security #CyberSecurity

TryHackMe | Cyber Security Training

I just completed Corridor room on TryHackMe. Can you escape the Corridor? #IDOR

tryhackme.com/room/corrido... #tryhackme

ahahhh
I Found Hidden IDORs in AOC 2025 Day 5 – user id=15 Exposed
youtu.be/2URiIP1xI8k?...
#BugBounty #tryhackme #idor

TryHackMe | Cyber Security Training

I just completed IDOR - Santa’s Little IDOR room on TryHackMe. Learn about #IDOR while helping pentest the TrypresentMe website. tryhackme.com/room/idor-ao... #tryhackme

TryHackMe | Cyber Security Training

I just completed Neighbour #ctf room on TryHackMe. Check out our new cloud service, Authentication Anywhere. Can you find other user's secrets? tryhackme.com/room/neighbo... #tryhackme #IDOR

Intersex people deserve the right to make their own choices about their bodies. #IDOR is important, as it is a day for the intersex community and allies to join together to fight for bodily autonomy and to honor the voices of intersex people around the globe.”

Gruppe von Menschen auf einem Platz vor mehrstöckigen Häusern, eine Person im Rollstuhl hält eine Kerze und eine andere ein Schild mit der Aufschrift 'SICHTBAR FÜR ALLE DIE ES NICHT SIND'.

Hier kommt noch ein Bild vom

"INTER*DAY OF REMEMBRANCE"🕯️

#Muenchen #Gaertnerplatz #IDoR

Today is Intersex Day of Remembrance 💜
We honour intersex lives lost and demand an end to non-consensual surgeries.

African Rainbow Family stands in solidarity with all intersex people.

Your body is valid.
#IDOR #IntersexSolidarity #IntersexRights #BodilyAutonomy #AfricanRainbowFamily

a crochet cardgame diamond looking like the intersex pride flag (yellow with a purple crochet ring in the middle)

it desperately needs to be blocked but I am back with a new #crochet #Cardgame #Coaster! This time, I made an #Intersex #Diamond! ♦️ It was not planned but it's very fitting for todays #IntersexDayOfRemembrance! #IDOR #handmade

💛💜 I dag markerer vi International Interkøn-mindedag 💛💜 #IDoR #IDoR2025

Awakari App

Unbelievable Security Hole: JWT Secret in a Series-B Funded Company It started as a routine penetration test. Little did I know I was about to uncover one of the most basic yet catastrophic securit...

#idor #business-logic-bug #bug-bounty-tips #cybersecurity #bug-bounty

Origin | Interest | Match

Every time I think IDORs are dead, a new payout reminds me otherwise. #IDOR #BugBounty #AccessControl

Awakari App

QR Code IDOR Vulnerability in Razorpay This post is about an IDOR (Insecure Direct Object Reference) vulnerability I discovered in Razorpay’s QR-code payment system , which I reported through Hac...

#hackerone #payment-gateway-security #idor #osint #bug-bounty

Origin | Interest | Match

Default Password Broke McHire + IDOR Demo

Watch the video on YouTube: youtu.be/_2Fb1Gjl9hI

#mcdonalds #idor #cybersecurity

How I Found a Critical IDOR in Indian Railways Corporate Booking Portal Exposing Millions of Users… A step-by-step breakdown of how a simple IDOR vulnerability exposed confidential personal details, allowed unauthorized feedback submission…

How I Found a Critical IDOR in Indian Railways Corporate Booking Portal Exposing Millions of Users… A step-by-step breakdown of how a simple IDOR vulnerability exposed confidential personal detai...

#cybersecurity #hacking #bug-bounty #idor #technology

Origin | Interest | Match

How I Found a Critical IDOR in Indian Railways Corporate Booking Portal Exposing Millions of Users… A step-by-step breakdown of how a simple IDOR vulnerability exposed confidential personal details, allowed unauthorized feedback submission…

How I Found a Critical IDOR in Indian Railways Corporate Booking Portal Exposing Millions of Users… A step-by-step breakdown of how a simple IDOR vulnerability exposed confidential personal detai...

#cybersecurity #hacking #bug-bounty #idor #technology

Origin | Interest | Match

McDonald’s AI Hiring Bot With Password ‘123456’ Leaks Millions of Job-Seekers Data A security vulnerability in McDonald's AI-powered hiring system has exposed the personal information of potentially 64 million job applicants.

#McDonald's #AI hiring bot exposed 64 million job applicants' personal data in McHire platform through #IDOR security vulnerability and weak password "123456.":
👇
cybersecuritynews.com/mcdonalds-ai...

Cap HTB Walkthrough: Exploiting IDOR and Linux Capabilities for Root Access Web enumeration, Packet analysis, IDOR exploitation,Linux capability abuse….

Cap HTB Walkthrough: Exploiting IDOR and Linux Capabilities for Root Access Web enumeration, Packet analysis, IDOR exploitation,Linux capability abuse…. Continue reading on System Weakness »

#cybersecurity #idor #hacking #hackthebox #privilege-escalation

Origin | Interest | Match

🔐 IDOR Vulnerability – Sadə Səhv, Böyük Təhlükə

Gəlin bir təhlükəsizlik boşluğunu izah edək ki, çox yayılmışdır, amma çox zaman gözardı edilir:
IDOR – Insecure Direct Object Reference

Ətraflı: medium.com/@developer.n...

#security #backend #IDOR #cybersecurity #webdev #apitesting

Mini #securecoding lesson: APIs are often where #IDOR vulnerabilities live. They’re scriptable, discoverable, and rarely protected by frontend logic. Even endpoints not visible to users are vulnerable! Attackers use tools like Burp or Postman to find and exploit them. Easily!

IDORs with unpredictable IDs are valid vulnerabilities A breakdown of why IDORs with unpredictable IDs are valid vulnerabilities.

#IDOR findings with unpredictable IDs are valid vulnerabilities - blog post by Joseph Thacker:
👇
josephthacker.com/hacking/cybe...

IDOR allows unauthorized payment hijacking FREE READ

IDOR allows unauthorized payment hijacking FREE READ Continue reading on InfoSec Write-ups »

infosecwriteups.com/idor-allows-unauthorized...

#idor #bug-bounty #cybersecurity #bug-bounty-tips

Result Details