⚠️ Training Target: This system uses numeric user IDs that may be vulnerable to IDOR attacks.
👤 User Profile
User ID: 123
Username:
user123
Email:
user123@company.com
Role: Employee
Department:
Engineering
Last Login: 2024-01-15 14:22:15
Account Status: Active
Access Level: Standard
Recent Activity
- Document access: project_specs.pdf
- Email sent to team@company.com
- Calendar event created: Team Meeting
🎯 Hunter Objective:
- The system loads user profiles based on the
user_id parameter
- Try changing the user_id value in the URL (e.g., ?user_id=1, ?user_id=2)
- Look for administrative accounts with low numeric IDs
- Extract the system master key from the admin profile
🔧 Test Different User IDs:
🚨 Numeric IDOR vulnerability | Let's Jam Training Platform