API based IDOR to leaking Private IP address of 6000 businesses

Hello fellow researchers,

Myself, Rafi Ahamed. I am a Cyber Security Researcher from Bangladesh. I love to break security. Anyway, without further ado let’s get to today’s topic.

Before I start, I wanna thank Katie Paxton for her videos. I learned a lot about IDORs from her videos. I actually earned my whole year’s bounty target just form IDORs that I learned from her videos.

What is IDOR?

address api bangladesh bounty bug bounty businesses cyber cyber security hacking hello idor infosec insecure ip address katie love object penetration testing private private ip red teaming researcher researchers security security researcher start target videos what is