PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Securing the Insecure Objects

labs.cognisys.group | blog | #pentesting | #access-control | #web-security | #idor | #case-study | #uuid
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Overview
Published
Collected

Related coverage

blog · bugbunny.ai
Insecure Direct Object Reference: The Authorization Bug Hiding in Plain Sight
Insecure direct object reference: the app exposes an object ID but never checks ownership, tenant or role—one user reads another's data; fix with centralized object authorization and negative tests.
blog · labs.cognisys.group
The Golden Role How a Simple API Logic Flaw Unlocked an Entire SaaS Platform
In a true black-box assessment, the engagement begins with minimal information: a target URL and no prior knowledge of the application’s architecture, credentials, or codebase. During a recent engagement targeting a multi-tenant SaaS platform, our initial objective was to establish initial access through standard user provisioning.
blog · bughunters.google.com
Breaking into Google's GFile for $100k
This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.
blog · portswigger.net
Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A case study of Burp AT analyzing 66,000 lines of minified JavaScript on a timeboxed engagement, uncovering a path to leak confidential whistleblower reports protected only by brute-forceable codes.
blog · blog.trailofbits.com
State divergence enables unauthorized access
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · bishopfox.com
Wodify
Wodify advisory on three chained flaws: an IDOR exposing all tenants' workout data, stored XSS via tampered data, and sensitive info disclosure; worst case, payment settings could be tampered with.
Back