Insecure Direct Object Reference IDOR ( Broken Access Control ) IDOR - PowerPoint PPT Presentation

Feb 02, 2024 •393 likes •517 views

Insecure Direct Object Reference IDOR ( Broken Access Control ) IDOR ( Broken Access Control ) ~# whoami Eric Biako Bsc. IT, CEH v9 Information security officer @ E-connecta Moderator @ https://legalhackmen.com IDOR ( Broken Access Control )

Insecure Direct Object Reference IDOR ( Broken Access Control )
IDOR ( Broken Access Control ) ~# whoami • Eric Biako Bsc. IT, CEH v9 Information security officer @ E-connecta Moderator @ https://legalhackmen.com
IDOR ( Broken Access Control ) IDOR occurs when a user supplied input is unvalidated and direct access to the object requested is provided.
IDOR ( Broken Access Control )
IDOR ( Broken Access Control ) This dwells on session management where the user has to be authenticated and/or authorized.
IDOR ( Broken Access Control )
impact…….. • unauthorized information disclosure • modification or destruction of data. • performing a function outside of the limits of the user.
IDOR ( Broken Access Control ) Prevent it….. Enforce access control policies such that users cannot act outside of their intended permissions
IDOR ( Broken Access Control ) Prevent it….. Use hash function and use hashed values instead of normal numbers or strings.
IDOR ( Broken Access Control ) Prevent it….. www.example.com/user.php?id= 12 www.example.com/user.php?id= ea3eda3d3w229 3
IDOR ( Broken Access Control ) DEMO BWAPP(www.itsecgames.com ) https://sourceforge.net/projects/bwapp/files/bWAPP/ OWASP WEBGOAT : https://github.com/WebGoat/WebGoat
IDOR ( Broken Access Control ) https://www.bugcrowd.com/how-to-find-idor-insecure-direct-object- • reference-vulnerabilities-for-large-bounty-rewards/ https://www.gracefulsecurity.com/idor-insecure-direct-object-reference/ • https://codeburst.io/hunting-insecure-direct-object-reference- • vulnerabilities-for-fun-and-profit-part-1-f338c6a52782 https://medium.com/@woj_ciech/explaining-idor-in-almost-real-life- • scenario-in-bug-bounty-program-c214008f8378 https://blog.detectify.com/2016/05/25/owasp-top-10-insecure-direct- • object-reference-4/

Recommend

A4: Insecure Direct Object References A4 Insecure Direct Object References General

A4: Insecure Direct Object References A4 Insecure Direct Object References General problem: Unrestricted Access A4: Data not properly protected A7: Functions not properly protected Examples Presentation-layer access control

506 views • 27 slides

Hacking Web Sites Insecure Direct Object Reference Emmanuel Benoist Fall Term 2020/2021 Berner

Hacking Web Sites Insecure Direct Object Reference Emmanuel Benoist Fall Term 2020/2021 Berner Fachhochschule | Haute ecole sp ecialis ee bernoise | Berne University of Applied Sciences 1 Table of Contents Introduction

890 views • 35 slides

Access Control Access Control 1 Access Control Access control : ensures that all direct

Access Control Access Control 1 Access Control Access control : ensures that all direct accesses to object are authorized a scheme for mapping users to allowed actions Protection objects : system resources for which protection is

576 views • 21 slides

Ninja Scaning by Fyodor CanSecWest 2009 March 20, 3:50 PM

Insecure.Org Insecure.Org Ninja Scaning by Fyodor CanSecWest 2009 March 20, 3:50 PM http://insecure.org/presentations/CSW09/ Insecure.Org Insecure.Org Ncat http://nmap.org/ncat/ Insecure.Org Insecure.Org Modern Networking Features

689 views • 21 slides

Authentication in Distributed Systems Austen Barker Access Control Operation Object principal

Authentication in Distributed Systems Austen Barker Access Control Operation Object principal Reference monitor Challenges of a distributed system Autonomy : Path from principal to an object may be long and convoluted. Size : Usually much

304 views • 29 slides

Broken Authentication: What it means, and what you can do hassan.abudu@owasp.org OWASP Top 10

Broken Authentication: What it means, and what you can do hassan.abudu@owasp.org OWASP Top 10 Vulnerabilities - 2017 Rank Name 1 Injection 2 Broken Authentication 3 Sensitive Data Exposure 4 XML External Entities 5 Broken Access

209 views • 6 slides

Ajax Reading & Reference Reference XMLHttpRequest object

Internet Programming Session 11 Ajax/Servlets Session 11 Ajax Reading & Reference Reference XMLHttpRequest object en.wikipedia.org/wiki/Xmlhttprequest Specification developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest

478 views • 14 slides

E ast T e nne sse e T e c hnology Cor r idor F ie ld Chapte r (E T T C F C, SAME )

Soc ie ty of Ame r ic an Militar y E ngine e r s E ast T e nne sse e T e c hnology Cor r idor F ie ld Chapte r (E T T C F C, SAME ) In coordination with the Nashville Post, SAME 1 SAME Mission To provide education and support

653 views • 11 slides

Direct Access Electricity Administration/Finance Issues Cte May 16, 2013 Approved Direct Access

Direct Access Electricity Administration/Finance Issues Cte May 16, 2013 Approved Direct Access (DA) Service Providers Contracts in place for two 1. major DA Service Providers They will both offer pricing, 2. with the award going to the

186 views • 14 slides

CBM and Bill Presentation Quick Reference How do I get access to CBM? How do I get access to

CBM and Bill Presentation Quick Reference How do I get access to CBM? How do I get access to Bill Presentation? You need to work with your Access Request If you have any kind of Finance access Coordinator to get access to CBM. (besides buying

306 views • 4 slides

Scripting and Extending Nmap and Wireshark with Lua by Gerald Combs & Gordon Fyodor

Insecure.Org Insecure.Org Scripting and Extending Nmap and Wireshark with Lua by Gerald Combs & Gordon Fyodor Lyon Sharkfest 2010 June 16, 1:15 PM http://insecure.org/presentations/Sharkfest10/ Insecure.Org Insecure.Org Nmap

278 views • 16 slides

NJ Direct 10/Aetna Freedom 10 v. Horizon Direct Access 10 Brown & Brown Benefit Advisors 1

NJ Direct 10/Aetna Freedom 10 v. Horizon Direct Access 10 Brown & Brown Benefit Advisors 1 Montgomery Township Board of Education SEHBP NJ Direct 10/Aetna Freedom 10 vs Horizon Direct Access 10 NJ Direct 10/Aetna Freedom 10 Horizon

472 views • 36 slides

L ongme adow Par kway F ox Rive r Br idge Cor r idor July 7, 2015 L ongme adow Par

L ongme adow Par kway F ox Rive r Br idge Cor r idor July 7, 2015 L ongme adow Par kway Br idge Cor r idor 5.6 mile s fr om Huntle y Road to IL 62 Unique munic ipal/ c ounty/ state / fe de r al par tne r ship L

476 views • 19 slides

D2: Access Control #2: Access cess Contr trol ol Similar to OWASP Top 10 Insufficient

D2: Access Control #2: Access cess Contr trol ol Similar to OWASP Top 10 Insufficient access control and authentication checks Insecure access control methods Private, internal functions and data are accessible through a

547 views • 11 slides

An incremental approach RCGC Defined Each object has associated count of references to it

An incremental approach RCGC Defined Each object has associated count of references to it Objects reference count When reference to object created Pointer copied from one place to another assignment RC of pointee is

313 views • 19 slides

Copying Objects: Reference Copy Copies: Reference vs. Shallow vs. Deep Reference Copy c1 := c2

Copying Objects: Reference Copy Copies: Reference vs. Shallow vs. Deep Reference Copy c1 := c2 Copy the address stored in variable c2 and store it in c1 . Writing Complete Postconditions Both c1 and c2 point to the same object.

115 views • 10 slides

1 Object References References as Links Recall that an object reference is a variable that

Collections A collection is an object that helps us organize and manage other objects CSC 2014 Java Bootcamp We will explore the concept of a collection separating the interface from the implementation dynamic data

447 views • 5 slides

CSE 510 Web Data Engineering Data Access Object (DAO) Java Design Pattern UB CSE 510 Web Data

CSE 510 Web Data Engineering Data Access Object (DAO) Java Design Pattern UB CSE 510 Web Data Engineering Data Access Object (DAO) Java Design Pattern A Data Access Object (DAO) is a bean encapsulating database access code Completely

558 views • 18 slides

Main St, Me sa, AZ Cor r idor R e vitalization USE PA We ste rn Bro wnfie lds Wo rksho p Se

Main St, Me sa, AZ Cor r idor R e vitalization USE PA We ste rn Bro wnfie lds Wo rksho p Se p 29, 2016 L aura Hyne man, RA, L E E D AP De puty Dire c to r, E nviro nme ntal & Sustainability Mesa, AZ Mesa Downtown for the East

524 views • 18 slides

Pass by Object Reference in Python Tyler Moore CS 2123, The University of Tulsa Variables in

Pass by Object Reference in Python Tyler Moore CS 2123, The University of Tulsa Variables in Python Better thought of as names or identifiers attached to an object. A nice explanation: http://python.net/~goodger/projects/pycon/2007/

2.31k views • 8 slides

Amadeus Consumer Reference Group 2021- 26 access arrangement revision Roundtable 3b. Total

Amadeus Consumer Reference Group 2021- 26 access arrangement revision Roundtable 3b. Total revenue, cost allocation and reference tariffs; other access arrangement issues 4 June 2020 via Microsoft Teams Agenda for today Agenda item Content

358 views • 33 slides

Galatians Whos Your Mama? Broken people know theyre broken! They know they need Jesus

Galatians Whos Your Mama? Broken people know theyre broken! They know they need Jesus & have given up on being their own savior! Abraham Sarah (wife) Isaac (son) Hagar (maidservant) Ishmael (son) Abraham, our broken spiritual

258 views • 21 slides

Technical Direct or Co Comp mpany Ob any Object ectives ves Become a cash producing,

Annual General Meeting Presentation Perth WA 15 November 2013 Bruce Kay Technical Direct or Co Comp mpany Ob any Object ectives ves Become a cash producing, dividend paying gold producer in 2-3 years Considerably enhance value

405 views • 29 slides

Database Access via Programming Languages SQL is a direct query langu age; as such, it has

Database Access via Programming Languages SQL is a direct query langu age; as such, it has limitations. Some reasons wh y access to databases via programming languag es is needed : Complex computational processing of the data.

690 views • 9 slides