Back to directory
WRITEUP #5014

HTTP Request Smuggling + IDOR

IDORHTTP request smuggling
by@_hipotermia_(hipotermia)
Program
-
Published
Dec 5, 2019
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://hipotermia.pw/bb/http-desync-idor
▸ RELATED WRITEUPS
Zomatoooo! IDOR in Saved Payments
IDOR
How I got my first $13500 bounty through Parameter Polluting (HPP)
IDORXSS
The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover
APIGraphQL
A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel
IDORBroken Access Control
Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
OtherWeb cache poisoning

Built with ❤️ by Shubham Rawat