How to hack: INSECURE DIRECT OBJECT REFERENCES - Burp Suite

#kali #burpsuite #learnkali #learnburpsuite #hacker #hacking

How to Solve: INSECURE DIRECT OBJECT REFERENCES

Hit Like and Subscribe! Thank you!

Hit: Access the Lab

After the home page on your screen: copy paste the url for the Target Scope

Set the browser network setting to manual proxy (127.0.0.1:8080)

Burp Proxy: Turn Off the Intercept: Intercept is Off

Burp Proxy: HTTP History (refresh the Fox browser)

Click Live chat - tab
Do some chat and hit: Send - button
Hit: View transcript - button

Click Send - button
The Response side will show: 200 OK | Row 1

Type in the search - text box: password | Hit: Enter
Copy the value of password.
In my case: gz9vg3icxfbep4m50ve6

Go back to your browser.
Click: My account - tab
Login in as carlos : carlos / gz9vg3icxfbep4m50ve6 (login / password)

Lab: Solved

Thank you for watching!