IDORs are often recommended as the easy vulnerability class, good to start the bug hunting journey. “Just change the ID in the URL parameter” they say. But are they really that easy? Well, there’s only one way to find out - to do the case study. This week, I analysed...
Case Studies
SQLi Case Study
I never look for SQL injection vulnerabilities. To be honest, I don’t even think about SQLi these days, considering it’s a thing of the past. But am I right doing that? Well, there’s only one way to find out! Extract all the disclosed reports from the Internet and do...
XSS – case study of 174 reports
XSSes are everywhere. They’ve been the most common vulnerability class for years. But while popping an alert may seem simple, there’s much, much more to cross-site scripting. What payloads are people using? Where are people finding XSSes? What about CSP? Can you...
SSRF – Case study of 124 bug bounty reports
In theory, SSRF is a really simple vulnerability class - you can make requests to arbitrary locations. In practice, however, it’s often more complex. Where to look for SSRFs? What parameters are most likely to be vulnerable? Do we actually need all those complex...