Back to directory

WRITEUP #4011

IDOR via Websockets allow me to takeover any users account

IDOR

by@tabaahi_(Mohsin Khan)

Bounty

450

Program

-

Published

Feb 14, 2021

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://mokhansec.medium.com/idor-via-websockets-allow-me-to-takeover-any-users-account-23460dacdeab

▸ RELATED WRITEUPS

Zomatoooo! IDOR in Saved Payments

How I got my first $13500 bounty through Parameter Polluting (HPP)

The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover

A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel

IDORBroken Access Control

Bypassing ACLs – IDOR exploitation via HPP

IDORHTTP parameter pollution

Built with ❤️ by Shubham Rawat