https://grit8086.github.io/tags/web/Recent content in Web on grit8086Hugoen-usTue, 24 Mar 2026 00:00:00 +0800https://grit8086.github.io/posts/bac-dod/Tue, 24 Mar 2026 00:00:00 +0800https://grit8086.github.io/posts/bac-dod/<h1 id="i-found-an-unauthenticated-indirect-object-reference-vulnerability-in-the-department-of-defense">I Found an Unauthenticated Indirect Object Reference Vulnerability in the Department of Defense</h1> <p>While hunting on the Department of Defense bug bounty program, I came across a simple but impactful vulnerability, a broken access control bug that allowed anyone to view files they didn&rsquo;t own, without even being logged in. Here&rsquo;s how it went.</p> <h3 id="what-is-idor">What is IDOR?</h3> <p>IDOR, or Insecure Direct Object Reference, is a type of broken access control vulnerability where an attacker can access or modify resources that belong to another user, simply by changing a reference to that resource, usually something visible like an ID in a URL or request parameter.Think of it like a hospital that gives each patient a folder numbered by their ID. You are patient 112, so your records are in folder 112. But nothing is stopping you from walking over and opening folder 113, which belongs to someone else entirely.</p>