Technique
technique:url_parameter_tampering
Changing an identifier in a URL to attempt to access data associated with another object.
Changing an identifier in a URL to attempt to access data associated with another object.
“I would call this URL parameter tampering.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Chris Monteiro | Explicit | 156 |
Chris Monteiro USES URL parameter tampering
Chris changed message identifiers in the URL to access other users' messages.
Explicit Confidence 99% · Chris Monteiro EP 156 Details
“I wonder if I change the message ID to something else; change it to 122. I got someone else’s messages.”