# IDOR (Indirect Object Reference)

***

{% embed url="https://nullr3x.medium.com/chaining-idor-and-host-header-can-takeover-18-million-of-users-account-39d402f6a79e" %}

{% embed url="https://cyberspecs.medium.com/idor-at-election-commission-website-e3f99c28c62d" %}

{% embed url="https://hackerone.com/reports/1403176" %}

{% embed url="https://hackerone.com/reports/439729" %}

{% embed url="https://hackerone.com/reports/974222" %}

{% embed url="https://hackerone.com/reports/1661113" %}

{% embed url="https://hackerone.com/reports/2122671" %}

{% embed url="https://hackerone.com/reports/1969141" %}

{% embed url="https://bepractical.tech/blogs/all-about-idor/" %}

{% embed url="https://medium.com/legionhunters/how-i-ethically-hacked-my-college-portal-with-a-jwt-token-and-reported-it-responsibly-16aa97a5255e" %}

{% embed url="https://www.youtube.com/watch?v=_zkxePwnf9A" %}
