Course
This course details the exploitation of Insecure Direct Object Reference (IDOR) using a Rails application. You will learn how an attacker can gain access to administration pages, bypass Multi-Factor Authentication, and ultimately achieve code execution on the server.
Skills covered
Injection
Authentication
Authorisation
CWE-639
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.