Category: Penetration Testing

Try Hack Me – Advent of Cyber 3 – Day 1 – IDOR

Posted on by Shobhit Mehta

What is an IDOR vulnerability? IDOR stands for Insecure Direct Object Reference and is a type of access control vulnerability. An access control vulnerability is when an attacker can gain access to information or actions not intended for them. An IDOR vulnerability can occur when a web server receives user-supplied input to retrieve objects (files,…

Vulnerability Management, Vulnerability Management v/s Penetration Testing, Vulnerability Management Lifecycle

Posted on by Shobhit Mehta

Vulnerability Management (VM) is one of the most important exercises for keeping a system secure. In his post, I would sum up the different phases of Vulnerability Management. But before that, I would like to clarify the distinction between Vulnerability Management and Penetration Testing (PT). Difference between VM and PT VM is the practice of…