Delete any post for all users via IDOR
Discription
# Description
Delete any post for all users via IDOR
# Proof of Concept
1- Post anything
2- Open Burp Suite to intercept the request
3- When deleting the post, we will notice that there is DELETE /api/memo/1010 in the request, Here the post id will be 1010
4- This number can be changed and any post you want will be deleted
# More explanation in a video
https://drive.google.com/file/d/1uaRsJmVkmpHM0YXm3WirXNWQKXkkRCcK/viewRead More
References
Back to Main