IDOR
appsec.fyi
BOLA: Enumerating an Entire Employee Directory Through a Predictable ID
2026-09-09
ExploitSpec — BOLA/IDOR regression tests from bounded, redacted HAR input
2026-09-06
[$538] IDOR allows friends to edit the date on their friends’ timeline posts on Facebook
2026-09-04
State divergence enables unauthorized access
2026-08-26
Introducing Session Switcher. Swap Burp Sessions with One Click!
2026-08-17
More IDOR →