👉 MoTaCon 2027 👈

Han Lim

Han Toan Lim

🎂 MoTaBirthday | March 19, 2017

Glossary Terms (1)

Insecure Direct Object Reference (IDOR) IDOR can show up in many places, beyond changing IDs in URLs, but also in how files are stored and accessed.Check the URL of the downloaded file. E.g. it is possible to upload a CV to a job application website. The user can download the latest version to check for necessary updates. Copy the URL of the downloaded document to a word processor. Use another user id and password to log in. Paste the copied URL in the address text field and press return. If the document is shown, then other users can access personal data. A more advanced trick is to change the name of the previously uploaded file in the URL.E.g. replace CV_John_Smith.pdf by CV_Peter_Jones.pdf.

💡What's next? View ways to contribute

⭐️ Earn more stars ⭐️

This badge is awarded to those that joined the MoTaverse in 2017.

Badge Award

about 2 months ago

Picture Perfect

This badge is awarded to members who update their profile with a new photo.

Badge Award

about 1 year ago

Social Connector

This badge is awarded to members who update their social links on their profile.

Badge Award

about 1 year ago

Glossary Contributor

This badge is awarded to members who contribute a new term or an alternative definition to the software testing glossary.

Badge Award

about 1 year ago

Added a definition

Insecure Direct Object Reference (IDOR)

Community Star

about 1 year ago

Contributions (1)

Glossary Term (1)

💡What's next? View ways to contribute