FedSearch - Federated network search engine

I wondered due to recently remembering when I was able to pull the PDFs off teacher's section. On the textbook manufacturer's just from fking around the URL.

This is a while ago, but I did mention to the professor but he did the idk what you talking about. (2+ years ago)

So I did email the contact email for the manufacturer. They asked for student ID, school code and classroom name. I told in response You can get the school name and thats it. But the following response was how I need to disciplinary actions against me for attempting to cheat. Thus they need the student ID. I ain't gonna get expelled for absolute dumb shit. So I didn't give it and cut off all communications.

In cases this it's now like a double sided thing. I want to report an issue so someone could fix it. But if I'm going to be punished too, why report the issue at all?

#teaching #security #IDOR #url #exploit

Last updated 3 years ago

Original post

JDN5IX · @JDN5IX

138 followers · 896 posts · Server hackers.town

Web Application Security - I have just completed this room! Check it out: https://tryhackme.com/room/introwebapplicationsecurity #tryhackme #security #web application #IDOR #Identification and Authentication Failure #Broken Access Control #Cryptographic Failures #introwebapplicationsecurity via @realtryhackme

#introwebapplicationsecurity #cryptographic #broken #identification #IDOR #web #security #tryhackme

Last updated 3 years ago

Original post

Jim Jones · @GreatBigTable

506 followers · 1328 posts · Server mastodon.social

Day 14 of the #TryHackMe #AdventOfCyber2022 covered a basic web application security assessment.

Specifically it tasks you with looking for a couple of insecure direct object references (#IDOR).

It was pretty simple and not that challenging, though it did get the point across.

Day 15 doesn't appear to be released yet.

#infosec

#tryhackme #adventofcyber2022 #IDOR #infosec

Last updated 3 years ago

Original post

Lucid.H3X · @lucidh3x

229 followers · 188 posts · Server infosec.exchange

Open media

Day 14 of adventbof cyber done was super easy 😂 it's a good break from the last 2 #tryhackme #offsec #infosec #student #cybersecurity #AdventOfCode2022 #IDOR

#tryhackme #offsec #infosec #student #cybersecurity #AdventOfCode2022 #IDOR

Last updated 3 years ago

Original post

Lucid.H3X · @lucidh3x

235 followers · 189 posts · Server infosec.exchange

Open media

Day 14 of adventbof cyber done was super easy 😂 it's a good break from the last 2 #tryhackme #offsec #infosec #student #cybersecurity #AdventOfCode2022 #IDOR

#tryhackme #offsec #infosec #student #cybersecurity #AdventOfCode2022 #IDOR

Last updated 3 years ago

Original post

Busta · @Busta

9 followers · 43 posts · Server infosec.exchange

#Webapplications was the theme of day 14 of #AdventOfCyber2022 where I learned a new vulnerability. I know most of the typical vulnerabilities, but have never heard of #IDOR (Insecure Direct Object References). But from what I've read, that's been replaced with Broken Access Control.

#tryhackme

#webapplications #adventofcyber2022 #IDOR #tryhackme

Last updated 3 years ago

Original post

Wepwawet the Gray Wolf god :verified: · @zodmagus

9 followers · 51 posts · Server infosec.exchange

Web Application Security - I have just completed this room! Check it out: https://tryhackme.com/room/introwebapplicationsecurity #tryhackme #security #web application #IDOR #Identification and Authentication Failure #Broken Access Control #Cryptographic Failures #introwebapplicationsecurity via @RealTryHackMe

#tryhackme #security #web #IDOR #identification #broken #cryptographic #introwebapplicationsecurity

Last updated 3 years ago

Original post

Attorney :verified: :pokeball: :promoted: · @attorney

123 followers · 97 posts · Server infosec.exchange

“#Security researcher Kamran #Mohsin discovered a flaw in the #Florida Department of Revenue system, which exposed over 700,000 customers, including their Social #Security numbers, physical addresses, and bank account details, among other sensitive #data.”

#securityleak #IDOR #vulnerability #bug #cybernews #tax #exploit #business
https://cybernews.com/news/taxpayer-social-security-numbers-exposed/?mibextid=Zxz2cZ