Knowledge Hub

IDOR

TryHackMe7 answered prompts

IDOR TryHackMe walkthrough with 7 answered prompts and lab methodology notes.

Prompts and answers

  • What does IDOR stand for?
    Insecure Direct Object Reference
  • What is the Flag from the IDOR example website?
    THM{IDOR-VULN-FOUND}
  • What is a common type of encoding used by websites?
    base64
  • What is a common algorithm used for hashing IDs?
    md5
  • What is the minimum number of accounts you need to create to check for IDORs between accounts?
    2
  • What is the username for user id 1?
    adam84
  • What is the email address for user id 3?
    j@fakemail.thm