Category: Attack Methodologies

IDOR

Jul 16, 2024

—

by

Oliver Nichols

in Attack Methodologies, Web Technologies

I created my first video regarding web vulnerabilities: IDOR (Insecure Direct Object Reference). Feel free to check it out and leave a comment!
Attack: Local File Inclusion

Apr 27, 2023

—

by

Oliver Nichols

in Attack Methodologies, Cyber Security

Local File Inclusion (LFI) can occur within an application when input can affect what file is “included”. If the contents of a file are displayed, this could provide the attacker the opportunity to view files (maybe even sensitive ones) within the file system. Example Consider the following HTTP request to display a list of movies:…