IDOR-Lab

IDOR Web App For Practices and Learning Purpose

Requirement

• Python 3.11 or Above
• Laptop
• Internet Connection

How to Start Server

• Step.1: Type in Cmd python3 idor.py
• Step.2 Open Browser And Type yourip:5000
• Step.3 1st user Admin Login Info admin:admin
• Step.4 2nd User Login kutapak:kutapak

How to Attack Server

• Step.1: Edit The 1st user Account Info & Capture Request in Burpsuite
• Step.2 See The Id parameter and Replace Other User Id Example ID=1 after Edit ID=2
• Step.3 Now Boom the 2nd User Removed in Website and You can Login there account and Takover.

Watch Video For More Information.

Check Out More Hacking Course

Made with ❤️ By Linuxndroid