IDOR · Question 3 of 12

What is often enough to retrieve foreign records with an IDOR hole?

1 answer is correct. Easy

Show answer

Answer

  • C Incrementing an ID in the URL

Explanation

Consecutive, guessable IDs make systematic harvesting easy. No tools are needed, only a changed parameter.

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications