User ID controlled by request parameter with password disclosure | Lab-08 Bangla

In this video, I demonstrate how to exploit an Insecure Direct Object Reference (IDOR) vulnerability where the user ID is controlled by a request parameter and the application exposes a user’s password in the response.

By manipulating the id parameter, we bypass access controls and retrieve sensitive account information belonging to another user. The application fails to properly enforce server-side authorization and incorrectly exposes credentials in the response, leading to full account takeover.

Key concepts covered:

Broken Access Control (IDOR)

Horizontal Privilege Escalation

Sensitive Data Exposure

Password Disclosure Vulnerability

Account Takeover

Testing access control using Burp Suite

This lab demonstrates how improper authorization checks and insecure password handling can result in critical security vulnerabilities.

#IDOR
#BrokenAccessControl
#PasswordDisclosure
#SensitiveDataExposure
#WebSecurity
#BugBounty
#CyberSecurity
#EthicalHacking
#PortSwigger
#BurpSuite
#OWASP
#AccountTakeover
#SecurityTesting
#InfoSec

Видео User ID controlled by request parameter with password disclosure | Lab-08 Bangla канала Hacking Bangla