webProeasy

Lab 109 — TaskForge — IDOR in Account Settings API

hackadvisor

Task: an account settings page exposed a client-controlled userId used by the API. Solution: tamper with the userId parameter to request the admin account and extract the flag from its api_key.

access_control idor api account_settings

idor_exploitationparameter_tampering

$ ls tags/ techniques/

access_control idor api account_settings

idor_exploitationparameter_tampering

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub, Discord, or Google to continue. No email required.

$sign in

$ grep --similar

Similar writeups

[web][Pro]TeamForge — IDOR to Owner Account Takeover via Weak Passwords— hackadvisor
[web][Pro]Lab 116 — InsightForge — IDOR via Undocumented Internal API— hackadvisor
[web][Pro]Lab 99 — CashPilot — IDOR in Team Member Management— hackadvisor
[web][Pro]Lab 259 — TalentBridge — IDOR in Employee Profile Endpoints— hackadvisor
[web][Pro]Lab 112 — MetricFlow — IDOR in Usage Analytics API— hackadvisor