Beyond RAM and ROM: IDOR Leads to Unauthenticated File Upload Vulnerability in Indian Government…

Beyond RAM and ROM: IDOR Leads to Unauthenticated File Upload Vulnerability in Indian Government Site

Insecure direct object references to file upload

Hi friends, I’m Vedavyasan S👽, a full-time bug hunter and a cybersecurity enthusiast. In this short time, I’ve secured Apple, Microsoft, Nokia, BBC, UN, IIT, and some government websites of India. 🕵️‍♂️💻

Let’s get to the story. I live in a small village in Kerala. One day, my friends teased me for not knowing the full forms …

bug bounty bug-bounty-tips bugs cybersecurity hacking