{"blog_url":"https://u3nerd.hatenablog.com/","provider_name":"Hatena Blog","height":"190","image_url":null,"title":"\u300cHacking India\u2019s Biggest Fintech Provider With a Simple IDOR\u300d\u304b\u3089IDOR\u3092\u5b66\u3076","published":"2023-08-28 21:51:22","author_name":"U3nerd","type":"rich","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fu3nerd.hatenablog.com%2Fentry%2F2023%2F08%2F28%2F215122\" title=\"\u300cHacking India\u2019s Biggest Fintech Provider With a Simple IDOR\u300d\u304b\u3089IDOR\u3092\u5b66\u3076 - The light of hope to the other side of the tunnel - Kotsu Kotsu To -\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","author_url":"https://blog.hatena.ne.jp/U3nerd/","version":"1.0","categories":["Bug Report"],"description":"\u30bd\u30fc\u30b9\uff1a monish-basaniwal.medium.com \u8106\u5f31\u6027\uff1aIDOR \u8a33\uff1a IDOR\u3068\u306f\u4f55\u3067\u3059\u304b? IDOR (\u9593\u63a5\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u53c2\u7167) \u306f\u3001\u3042\u3089\u3086\u308b\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u6700\u3082\u4e00\u822c\u7684\u306a\u8106\u5f31\u6027\u306e 1 \u3064\u3067\u3059\u304c\u3001\u975e\u5e38\u306b\u5371\u967a\u3067\u3042\u308a\u3001\u3042\u3089\u3086\u308b\u30d3\u30b8\u30cd\u30b9\u306b\u6700\u3082\u5927\u304d\u306a\u5f71\u97ff\u3092\u4e0e\u3048\u3002 IDOR \u306f\u3001\u30e6\u30fc\u30b6\u30fc X \u304c\u30e6\u30fc\u30b6\u30fc Y \u3067\u3042\u308b\u3053\u3068\u3092\u9069\u5207\u306b\u691c\u8a3c\u305b\u305a\u306b\u30e6\u30fc\u30b6\u30fc Y \u306e\u30c7\u30fc\u30bf\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306b\u4ee3\u308f\u3063\u3066\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u5b9f\u884c\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u5358\u306a\u308b\u8106\u5f31\u6027\u3067\u3002 \u8106\u5f31\u6027\u306e\u6982\u8981\uff1a Impact: User Financial + Personal Data LeakageTarget: Undisclose\u2026","width":"100%","url":"https://u3nerd.hatenablog.com/entry/2023/08/28/215122","provider_url":"https://hatena.blog","blog_title":"The light of hope to the other side of the tunnel - Kotsu Kotsu To -"}