writeups.xyz / How i could take over any Account on a USA Department of Defense Website due to a simple IDOR

Submitter : c2a

Date: 7 November 2020

Bounty : undisclosed

Vulnerabilities :

• IDOR
• Account Takeover

Programs :

• U.S. Dept of Defense

Authors :

• Gal Nagli (@Naglinagli)

Link :
https://web.archive.org/web/20221110072323/https://galnagli.com/DoD_IDOR/