Description

This Session was conducted Live Virtuallly on Zoom in Octoer 2026

Trainner- Tamanna Agrawal

Coverage:
1. IDOR Fundamentals – Understanding Broken Access Control, object references, and ownership validation.
2. Finding IDOR Vulnerabilities – Identifying vulnerable IDs in URLs, parameters, APIs, JSON requests, and file access.
3. Horizontal Privilege Escalation – Accessing another user's data due to missing authorization checks.
4. IDOR in APIs (BOLA) – Testing GET, POST, PUT, PATCH, and DELETE requests for object-level authorization flaws.
5. Advanced IDOR Testing – Multi-step workflows, hidden parameters, file access, UUIDs, and common bypass scenarios.
6. Hands-on Assessment & Remediation – Using Burp Suite to identify, validate, report, and fix IDOR vulnerabilities.