How to find more IDORs

And maximize their impact while hunting for bugs.

Vickie Li
5 min readSep 17, 2019

--

I’m not sure if he’s looking for a treasure or scooping up poop.

I love IDORs. They are easy to find, simple to exploit and often carry significant business impact. They were the root causes of some of the most critical vulnerabilities that I’ve found.

If you aren’t familiar with IDORs or need a refresher, you can find an article explaining the basics of IDORs here:

--

--

Vickie Li

Professional investigator of nerdy stuff. Hacks and secures. Creates god awful infographics. https://twitter.com/vickieli7