Hunting IDOR with Z-winK (Part 2)

Welcome to the fifth piece in Bugcrowd's LevelUpX series! Our speaker in the series is Z-winK. In this presentation, Z-winK will build on his latest series and will take you through a deeper dive into hunting IDOR (Insecure Direct Object Reference) for big dollars.
Want to get involved?
We’re always looking for researchers and hackers like you who have tips, tricks, and skills that you want to share with the community! If you have any questions, or would like to participate with LevelUpX, please reach out to [e-mail]

[@kittoh_]

This is one of the few videos that is legitimately teaching actual knowledge. Hoping his channel would come back.

[@CodingQuan]

One of the cleanest easy to understand videos on the topic!! 💯Bravo

[@CodeAcademia00]

Thank you man , thats so amazingly helpful ❤

[@ciconid]

Great video!!! Loved the phrase "It doesn't require rocket surgery" :)

[@ZaG-yo3fd]

Great explanation! Thanks Z-winK😁🙌✌💪

[@modmah7191]

thanks for the amazing video!
please make more content about another vulnerabilities.

[@wardellcastles]

Great video!
In my research into hacking APIs, rarely do I find IDs in the GET request. If I see any ids they are highly encoded in the cookie. What do you do when you see this?

[@diegopirela9808]

thank for information bro you are great

[@shuvamadhikari2662]

Awesome video 😄 ❤.

[@haanrey]

I like when ryan reynolds himself teachers IDOR !! Just Awesome !!

[@tayyabch2868]

Nice tutorial. I have been having content issues with my hmdi connected speaker and subwoofer. No soft is coming through, still coming out of

[@techguru5230]

where is part1

[@nikeshrajbanshi647]

very helpful video

[@extrabgmi2788]

very very gooood, thaaankss maan

[@robot67799]

Thank-you ✨

[@birch8005]

Z-winK, when you are testing for idor, which are not numerical values can you irritate over the list not exposing sensitive information?🤔

[@robot67799]

26:51 Damn, that's cool

[@aliuzun8885]

Ty

[@StephenOgu]

Favorite bugs 🐛

[@andrewalba369]

project a lot because I've been working on other stuff (and being lazy lol). Also, I had been facing a recurring problem of content dropouts in

[@user-ey5ob2ow7y]

Where is part 1 plz

[@prabuinet]

where is part 1

[@sharifulislamshupol8364]

What is this site/ others?
How to works in this site?
plz help me.

[@imosolar]

Please what about the cookie swap with accounts

[@gitanshgulati1732]

I procrastinated for 6 years

[@WaseemAkram-kx7tq]

Where is first part ?

[@EktuTechy]

In his own channel

[@UK-TECH-]

The GMS that you use here is completely different softing than the one I use even though I'm using tNice tutorials exact software, why is tNice tutorials?

[@ArSiddharth]

I want to start bug bounty...
And I just don't wanna start, I also want to find bugs,
So first I have to learn then I will do this
so where do i start learning.

[@wardellcastles]

Portswigger Web Academy is a good place to start.

[@haksting]

@@wardellcastles +1

[@thewholeworldblurred]

All his videos are gone

[@ahmedrumble]

Why ?!

[@Aditya-vv3sq]

!

[@EhsanEnglishCare2000]

lmao XDDD

[@samindunimsara]

If you saw api/detaback/?ad_id=1234577