"Easiest" Beginner Bugs? Access Control and IDORs

[@cesarconterno4962]

Huge thanks for the awesome video walkthrough on bug bounty hunting and access control! It was seriously eye-opening, and I learned so much from your clear explanations and practical example.

[@tobihier]

I sincerely hope you know how much your videos are helping me on my journey. Thank you 🙏

[@nazneenzafar743]

Thanks for this lecture, I was learning about IDOR from portswigger but your video explainer really has help to understand why IDOR exist in the first place. May be my next bounty would come from IDOR.

[@SyedImran-qf1eh]

Hello zafar, Can we find through mobile phone.

[@nazneenzafar743]

@@SyedImran-qf1eh I am not sure; i only do bug hunting through my Laptop which has Kali linux installed.

[@SyedImran-qf1eh]

Okay, How we find through Kali Linux. I heard that we need burp suite software to find vulnerabilitys.

[@nazneenzafar743]

@@SyedImran-qf1eh This chennel has already made good videos on how to use burp suite. kzbin.info/www/bejne/i5jFiqKwfplmbK8

[@amoh96]

hello how i can contact you im beginner i have alot of qst if u answer me i'll be happy & thank you brother

[@firosiam7786]

Wow this took like forever to come out glad it came .

[@nazneenzafar743]

I like how the database at 7:22 has customer table with characters from Simpsons, Futurama and Family guy.

[@JohnJohn-sf1df]

Keep the Bug Bounty videos coming!

[@friend-el3fc]

literally you are the best !! please keep on posting Bug Bounty videos

[@SantiagoARosas]

I just started in this career. Few days ago the magic of the algorithm put me your awesome content. Thanks for share 💚 Saludos

[@tobysonline4356]

I can’t thank you enough for these!

[@The_reaperBH]

Busted!!!🔥🔥🔥looking for more videos like this🔥🔥🔥🔥

[@flintstones6728]

Today is a beautiful holiday.And the second thing is the expected video, thank you very much❤❤❤❤❤❤

[@Makingmoneyonli]

Great content Thank you for all these videos really helped me through my journey

[@V.WalkingTours]

Hi Kattie! I watch a lot of your videos and I keep watching them and learning! I don't know if i this video, but I came here to tell you that I found my first IDOR and looks quite serious because I can log in other users account too! Thank you so mucho for your content and This course is great!

[@InsiderPhD]

Amazing - how did it go?

[@katwitt95]

thank you so much for this video!!

[@AliIssa1]

Really awesome content! I am currently working on a video explaining IDOR and showing how we can find these types of vulnerabilities using Autorize. Do you use Authorize? I find it really useful.

[@InsiderPhD]

I do! I actually made a video about it, I wish they fixed the bad UI though, it's super confusing for beginners

[@taiwomiracleveecthor2617]

Thank you Ma for the update

[@rb-py5cv]

Thank ma'am please share the video early as possible so we follow in certain time because some video are in the more days gap

[@InsiderPhD]

Yeah sorry about that, videos have to go through my own editing, plus bugcrowd's review and since we're in Australia, the US and UK timezones don't always quite match up for weekend releases!

[@mohamedyousry9374]

The video is truly awesome! In the 'Account Containers' section, you mentioned that you'll provide a method in the description to match the Burp Suite pad with the Firefox Multi-Account Containers. Could you please share the details? Thanks in advance!

[@InsiderPhD]

“PwnFox” full video should be out in a week or so :)

[@shuvonofc]

This video is very useful for me.. 💗 Please complete this bug bounty hunting Crouse.

[@Unhacker]

You are excellent.

[@ismailachabi8627]

thank you so much

[@onlyfybyXING]

thank you

[@HEXiT_]

thanks

[@joaopaulogv]

thank u so much for this great content! does companies paid bug bounties for discoveries like ID database exposure? like the example you have around ID (12) and the UUID as key id to look for data in database.

[@InsiderPhD]

Not usually but if you find an IDOR on a app that uses UUID you can boost the severity

[@badxcode]

Does IDOR and BOLA same thing? If not, what's the difference between them? While showing IDOR, the user was accessing another user's document at 5:40, while discussing BOLA at 8:30, it sounded like the same thing. Can anybody explain it further?

[@chabuhi]

IDOR and BOLA are the same.

[@badxcode]

@@chabuhi yeah, I googled about it and found out similar answers. Thanks buddy.

[@VasheshJ]

Thanks for this lecture, although I had a question. This attack scenario relies on an attacker being able to retrieve the victims "Session Key" value. If we are not able to get the session key, then it is not a vulnerability, right?

[@InsiderPhD]

Afraid not, your best bet if to see if you can do some cross user interaction (do something on account A when using account Bs session) or generate a session for any user

[@razmjumehdi9069]

For IDOR testing, if we see a random user ID in the target but we can see the information of the supposed victim, can we report it on hackerone? Will they accept it as a valid report from me? Or is it better not to report?

[@razmjumehdi9069]

Please answer my question. If I inject another user's cookie in the same way instead of another user's cookie and it accepts me and shows the second user's information, can I report it? Is it considered a valid report and will they reward me?

[@ENGCYVyasaRaj]

thanks for this content i find a bug and reported my job is done

[@manan_sanghvi]

hi! at 18:22 how changing cookie of another user and get his access! how it is a vulnerability?? i think it is a normal cookie behaviour because it is used to identify user... i was reported that type of report but it was rejected...

[@InsiderPhD]

Because we are using the cookies of account A to affect account B, it's the ability to change a resource owned by another user. If you're using the cookies of A and affecting resources owned by that user it's not a vulnerability which is why your report was rejected. We change the cookies because it's easier than logging out of one account, logging in to another, every single endpoint

[@mamunwhh]

You change A's cookie to B's cookie. But how to attacker find victim user cookies? Please reply. Thanks❤

[@InsiderPhD]

You don’t: all you’re doing is simulating logging into another account and performing actions on the first account. You don’t need As cookies to affect account A.

[@ENGCYVyasaRaj]

@@InsiderPhD then this is not a access control because there is no any security impact on the account without Knowing their credentials how to get their session key

[@quanghuyang2822]

Hi, I'm new to the world of security administration, and I was hoping to get some guidance from someone with your expertise. Do you have any advice on mapping out a career path in this area?

[@DJUNOS]

love your British accent

[@ByteHax_]

Love from india sister ❤❤❤

[@ajp2279]

I'f the accsses control manufactor is known you can just look up engineer code and your in.

[@learn-with-noob-007]

I'm first 😂❤ Love your content 😊

[@hrishikeshdahale4640]

Aww I was just 5 min late

[@SyedImran-qf1eh]

Hello Mam, I don't have laptop or Computer. So how can I hack through phone can you please give me advice. And how we can find secrets leaks in github please give me some suggestions.

[@InsiderPhD]

GitHub secrets there's a tool called trufflehog which can do it for you. How to use your phone, I am not an expert but a lot of people recommend googledorking, you'll probably get more luck on twitter :)

[@SyedImran-qf1eh]

@@InsiderPhD thanks for the replying.

[@hunterone7072]

How user B find user A job request..how it possible??🙄

[@InsiderPhD]

You create both users :), it simulates you knowing the request + any parameters but being able to affect another account

[@ReligionAndMaterialismDebunked]

Pokémon! Hehe. #90sKidHere.

[@ReligionAndMaterialismDebunked]

Early 🔥🤝

[@medogamer8524]

IM Definitly marrying someone with the same accent that you have