IDOR Workshop

Goal: find a string like flag{[a-zA-Z0-9_!]+} and submit it here.

🚩Practice Task 1(Difficulty: Piece of cake)

Simple task to reinforce the material covered. Find a secret joke.

🚩Practice Task 2(Difficulty: Piece of cake)

Simple task to reinforce the material covered. Delete another user's joke.

🚩Task 1 "My Notes" (Difficulty: Hard)

There is a service that allows you to store notes (very unique, i know). No registration or login needed, very easy to use. Your goal is to read a note of another user.

🚩Task 2 "My Notes v2.0"(Difficulty: Easy)

There is a service that allows you to store notes, but a new version. They fixed a bug, and introduced new functionality - file upload. Your goal is to get a file from a note of another user.

🚩Task 3 "My Notes enterprise"(Difficulty: Medium)

And again a service that allows you to store notes, but now an enterprise edition. They fixed the second bug as well, and introduced new functionality - you can now register your own company and share notes between coworkers. Your goal is to get a file from a note of another user’s company.