Parameter Manipulation Testing (IDOR)

This project demonstrates parameter manipulation testing using Burp Suite Repeater in Kali Linux.

The test involved capturing a request that contained a user ID parameter and manually modifying the parameter value to observe how the application responds. By changing the ID values, it was possible to access different user profiles.

This behavior indicates a potential Insecure Direct Object Reference (IDOR) vulnerability, which occurs when applications fail to properly verify user authorization before granting access to resources.

The project highlights the importance of implementing strong access control mechanisms in web applications.

Tools Used

Kali Linux

Burp Suite Repeater