IDOR on Policy to Packets https://www.policytopackets.com/tags/idor/ Recent content in IDOR on Policy to Packets Hugo -- gohugo.io en reedveggleston@gmail.com (Reed Eggleston) reedveggleston@gmail.com (Reed Eggleston) © 2026 Reed Eggleston Sun, 22 Feb 2026 21:48:00 +0000 (Writeup) LetsDefend EventID: 119 - [SOC169 - Possible IDOR Attack Detected] https://www.policytopackets.com/writeups/letsdefend/soc/169_119/ Sun, 22 Feb 2026 21:48:00 +0000 reedveggleston@gmail.com (Reed Eggleston) https://www.policytopackets.com/writeups/letsdefend/soc/169_119/ Investigating an IDOR alert after repeated POST requests incremented a user ID parameter, reviewing HTTP logs and response behavior, and confirming successful data exposure based on varying response sizes and consistent 200 status codes before escalating the case.