🎯 Vulnerability Info
Type: Insecure Direct Object Reference (IDOR)
Severity: High
💡 How to Exploit
- User ID is passed as a URL parameter
- No authorization check verifies ownership
- Change the ID to access other users' data
🧪 Try These IDs
?user_id=1 (admin)
?user_id=2 (user - your account)
?user_id=3 (john)
?user_id=4 (jane)
?user_id=5 (guest)
📊 User Enumeration
| ID |
Username |
Role |
| 1 |
admin |
admin |
| 2 |
user |
user |
| 3 |
john |
user |
| 4 |
jane |
user |
| 5 |
guest |
guest |
🔧 Burp Suite Intruder
Use Intruder to enumerate all users:
- Send request to Intruder
- Mark user_id as payload position
- Use Numbers payload (1-100)
- Start attack and analyze responses