codepath / codepath/cybersecurity

IDOR Bank Account challenge broken

Open
#43 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
6
Forks
2
PR merge metrics
No merged PRs in 30d

Description

Student reported for Security Shephard Insecure Direct Object Reference Bank Challenge

"The last challenge (Insecure Direct Object Reference Bank Challenge). There is a bug in the challenge. If you just click "Sign In" without doing anything else, you will get the key."

Image showing they have all the money from just signing in:

![53268213_2240873746167385_7929106744834260992_n](https://user-images.githubusercontent.com/9291399/53691935-65fe2f80-3d3c-11e9-9b3a-7d998a7082b2.png)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.