AoC Day 3 is all about content discovery and authentication bypass. Content discovery is exactly what it sounds like, finding content in an application. Files, folders, and different assets that were not intended for the general public. Authentication Bypass is a loophole or vulnerability that lets a malicious actor use…

For Aoc3 Day 2 we will be walking through exploiting HTTP(S)(Hypertext Transfer Protocol(Secure)) and cookies. HTTP(S) is a client-server protocol to provide communication between a client and a webserver. (When you enter google.com into your web browser, this is the protocol that is being used.) Cookies are text files with…

This is the first of many walkthroughs that I am writing up, with many more to come. I would love any feedback! Video Walkthrough: https://youtu.be/MhOTZ93slkM What is IDOR (Insecure direct object references)? It is an access control vulnerability that arises when an application uses user-supplied input to access objects directly…