27 lines (20 loc) · 945 Bytes

IDOR-Lab

IDOR Web App For Practices and Learning Purpose

Requirement

Python 3.11 or Above
Laptop
Internet Connection

How to Start Server

Step.1: Type in Cmd python3 idor.py
Step.2 Open Browser And Type yourip:5000
Step.3 1st user Admin Login Info admin:admin
Step.4 2nd User Login kutapak:kutapak

How to Attack Server

Step.1: Edit The 1st user Account Info & Capture Request in Burpsuite
Step.2 See The Id parameter and Replace Other User Id Example ID=1 after Edit ID=2
Step.3 Now Boom the 2nd User Removed in Website and You can Login there account and Takover.

Watch Video For More Information.

Check Out More Hacking Course

Made with ❤️ By Linuxndroid