idor

هل سمعت يومًا بثغرة تُسمّى Blind IDOR؟ تبدو غريبة، أليس كذلك؟

Ahmed Taher

هل سمعت يومًا بثغرة تُسمّى Blind IDOR ؟ تبدو غريبة، أليس كذلك؟ سأتحدث اليوم – بمشيئة الله – عن ثغرة صادفتُها في إحدى أكبر الشركات. ثغرة بدأت...

اقرأ المزيد

تحميل المزيد من المشاركات

جاري التحميل ...

لم يتم العثور على أي نتائج

window['__wavt'] = 'AEUoTZo8t-GWU_yzIc8z-cD25mox:1781855659867';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d859562860560415763','//www.asecurity.pro/search/label/idor','859562860560415763'); _WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '859562860560415763', 'title': '\u0645\u062f\u0648\u0646\u0629 ASecurity \u0644\u0623\u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a', 'url': 'https://www.asecurity.pro/search/label/idor', 'canonicalUrl': 'https://www.asecurity.pro/search/label/idor', 'homepageUrl': 'https://www.asecurity.pro/', 'searchUrl': 'https://www.asecurity.pro/search', 'canonicalHomepageUrl': 'https://www.asecurity.pro/', 'blogspotFaviconUrl': 'https://www.asecurity.pro/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': true, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'ar', 'localeUnderscoreDelimited': 'ar', 'languageDirection': 'rtl', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22\u0645\u062f\u0648\u0646\u0629 ASecurity \u0644\u0623\u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a - Atom\x22 href\x3d\x22https://www.asecurity.pro/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22\u0645\u062f\u0648\u0646\u0629 ASecurity \u0644\u0623\u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a - RSS\x22 href\x3d\x22https://www.asecurity.pro/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22\u0645\u062f\u0648\u0646\u0629 ASecurity \u0644\u0623\u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/859562860560415763/posts/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-4213042334726647', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': true, 'adsenseAutoAds': true, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/cd96ebb13b57568d', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': '\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0627\u0644\u0631\u0627\u0628\u0637', 'key': 'link', 'shareMessage': '\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0627\u0644\u0631\u0627\u0628\u0637', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': '\u0645\u0634\u0627\u0631\u0643\u0629 \u0625\u0644\u0649 Facebook', 'target': 'facebook'}, {'name': '\u0643\u062a\u0627\u0628\u0629 \u0645\u062f\u0648\u0646\u0629 \u062d\u0648\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0627\u0631\u0643\u0629', 'key': 'blogThis', 'shareMessage': '\u0643\u062a\u0627\u0628\u0629 \u0645\u062f\u0648\u0646\u0629 \u062d\u0648\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0627\u0631\u0643\u0629', 'target': 'blog'}, {'name': 'X', 'key': 'twitter', 'shareMessage': '\u0645\u0634\u0627\u0631\u0643\u0629 \u0625\u0644\u0649 X', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': '\u0645\u0634\u0627\u0631\u0643\u0629 \u0625\u0644\u0649 Pinterest', 'target': 'pinterest'}, {'name': '\u0628\u0631\u064a\u062f \u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a', 'key': 'email', 'shareMessage': '\u0628\u0631\u064a\u062f \u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27ar\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': '\u0642\u0631\u0627\u0621\u0629 \u0627\u0644\u0645\u0632\u064a\u062f', 'pageType': 'index', 'searchLabel': 'idor', 'pageName': 'idor', 'pageTitle': '\u0645\u062f\u0648\u0646\u0629 ASecurity \u0644\u0623\u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a: idor', 'metaDescription': ''}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': '\u062a\u0639\u062f\u064a\u0644', 'linkCopiedToClipboard': '\u062a\u0645 \u0646\u0633\u062e \u0627\u0644\u0631\u0627\u0628\u0637 \u0625\u0644\u0649 \u0627\u0644\u062d\u0627\u0641\u0638\u0629', 'ok': '\u062d\u0633\u0646\u064b\u0627', 'postLink': '\u0631\u0627\u0628\u0637 \u0627\u0644\u0645\u0634\u0627\u0631\u0643\u0629'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': '\u0645\u062e\u0635\u0635', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': '\u0645\u062f\u0648\u0646\u0629 ASecurity \u0644\u0623\u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a', 'description': '', 'url': 'https://www.asecurity.pro/search/label/idor', 'type': 'feed', 'isSingleItem': false, 'isMultipleItems': true, 'isError': false, 'isPage': false, 'isPost': false, 'isHomepage': false, 'isArchive': false, 'isSearch': true, 'isLabelSearch': true, 'search': {'label': 'idor', 'resultsMessage': '\u0639\u0631\u0636 \u0627\u0644\u0631\u0633\u0627\u0626\u0644 \u0630\u0627\u062a \u0627\u0644\u062a\u0635\u0646\u064a\u0641 idor', 'resultsMessageHtml': '\u0639\u0631\u0636 \u0627\u0644\u0631\u0633\u0627\u0626\u0644 \u0630\u0627\u062a \u0627\u0644\u062a\u0635\u0646\u064a\u0641 \x3cspan class\x3d\x27search-label\x27\x3eidor\x3c/span\x3e'}}}, {'name': 'widgets', 'data': [{'title': '\u0645\u062f\u0648\u0646\u0629 ASecurity \u0644\u0623\u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a (\u0631\u0623\u0633 \u0627\u0644\u0635\u0641\u062d\u0629)', 'type': 'Header', 'sectionId': 'logo', 'id': 'Header1'}, {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'type': 'PageList', 'sectionId': 'pages', 'id': 'PageList1'}, {'title': '\u0645\u0648\u0627\u0642\u0639 \u0627\u0644\u062a\u0648\u0627\u0635\u0644 \u0627\u0644\u0625\u062c\u062a\u0645\u0627\u0639\u064a', 'type': 'LinkList', 'sectionId': 'topsocialL', 'id': 'LinkList3'}, {'title': '\u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629', 'type': 'LinkList', 'sectionId': 'menu', 'id': 'LinkList001'}, {'title': '\u0628\u062d\u062b ...', 'type': 'BlogSearch', 'sectionId': 'searchform', 'id': 'BlogSearch2'}, {'title': '\u0646\u0645\u0648\u0630\u062c \u0627\u0644\u0627\u062a\u0635\u0627\u0644', 'type': 'ContactForm', 'sectionId': 'AddOns', 'id': 'ContactForm200'}, {'title': '\u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u0645\u062f\u0648\u0646\u0629 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629', 'type': 'Blog', 'sectionId': 'Tempnec', 'id': 'Blog1', 'posts': [{'id': '2268529299850239740', 'title': '\u0647\u0644 \u0633\u0645\u0639\u062a \u064a\u0648\u0645\u064b\u0627 \u0628\u062b\u063a\u0631\u0629 \u062a\u064f\u0633\u0645\u0651\u0649 Blind IDOR\u061f \u062a\u0628\u062f\u0648 \u063a\u0631\u064a\u0628\u0629\u060c \u0623\u0644\u064a\u0633 \u0643\u0630\u0644\u0643\u061f', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiMrovUH4m4LfmnK1mephFpHriXyXUfReib4ZeKbjU3NkDjXC91rIFjr2hWw5NzeETNrMFo0sEu2jzHiwulO9MLxofZbvC3rK4klhujhG4OBK-pwNuw9Oavrzbq6l7nOF56rewnV7jostK76LTjZCLgF16kjgwz8OgS2Td5Rkl81jUCyPY_bClmMXTAW_A/w640-h360/Black%20and%20Pink%20Gradient%20Modern%20Technologies%20YouTube%20Thumbnail%20(1).png', 'showInlineAds': false}], 'headerByline': {'regionName': 'header1', 'items': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': '\u0643\u062a\u0628:'}, {'name': 'timestamp', 'label': '-'}]}, 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'comments', 'label': 'comments'}, {'name': 'icons', 'label': ''}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': ''}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': '\u0643\u062a\u0628:'}, {'name': 'timestamp', 'label': '-'}, {'name': 'comments', 'label': 'comments'}, {'name': 'icons', 'label': ''}, {'name': 'labels', 'label': ''}]}]}]); _WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'logo', document.getElementById('Header1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList1', 'pages', document.getElementById('PageList1'), {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'links': [{'isCurrentPage': false, 'href': 'https://www.asecurity.pro/p/blog-page.html', 'id': '7097010710447364483', 'title': '\u0641\u0647\u0631\u0633 \u0627\u0644\u0645\u0648\u0642\u0639'}, {'isCurrentPage': false, 'href': 'https://www.asecurity.pro/p/contact-us.html', 'id': '1632315167476710974', 'title': '\u0627\u062a\u0635\u0644 \u0628\u0646\u0627'}, {'isCurrentPage': false, 'href': 'https://www.asecurity.pro/p/about-us.html', 'id': '7792050860536843367', 'title': '\u0645\u0646 \u0646\u062d\u0646'}, {'isCurrentPage': false, 'href': 'https://www.asecurity.pro/p/privacy-policy.html', 'id': '4520257499209488876', 'title': '\u0633\u064a\u0627\u0633\u0629 \u0627\u0644\u062e\u0635\u0648\u0635\u064a\u0629'}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList3', 'topsocialL', document.getElementById('LinkList3'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList001', 'menu', document.getElementById('LinkList001'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_BlogSearchView', new _WidgetInfo('BlogSearch2', 'searchform', document.getElementById('BlogSearch2'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm200', 'AddOns', document.getElementById('ContactForm200'), {'contactFormMessageSendingMsg': '\u062c\u0627\u0631\u064d \u0627\u0644\u0625\u0631\u0633\u0627\u0644...', 'contactFormMessageSentMsg': '\u062a\u0645 \u0625\u0631\u0633\u0627\u0644 \u0631\u0633\u0627\u0644\u062a\u0643.', 'contactFormMessageNotSentMsg': '\u062a\u0639\u0630\u0631 \u0625\u0631\u0633\u0627\u0644 \u0627\u0644\u0631\u0633\u0627\u0644\u0629\u060c \u064a\u0631\u062c\u0649 \u0627\u0644\u0645\u062d\u0627\u0648\u0644\u0629 \u0645\u0631\u0629 \u0623\u062e\u0631\u0649 \u0641\u064a \u0648\u0642\u062a \u0644\u0627\u062d\u0642.', 'contactFormInvalidEmailMsg': '\u064a\u0644\u0632\u0645 \u0625\u062f\u062e\u0627\u0644 \u0639\u0646\u0648\u0627\u0646 \u0628\u0631\u064a\u062f \u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0635\u0627\u0644\u062d.', 'contactFormEmptyMessageMsg': '\u0644\u0627 \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0643\u0648\u0646 \u062d\u0642\u0644 \u0627\u0644\u0631\u0633\u0627\u0644\u0629 \u0641\u0627\u0631\u063a\u064b\u0627.', 'title': '\u0646\u0645\u0648\u0630\u062c \u0627\u0644\u0627\u062a\u0635\u0627\u0644', 'blogId': '859562860560415763', 'contactFormNameMsg': '\u0627\u0644\u0627\u0633\u0645', 'contactFormEmailMsg': '\u0628\u0631\u064a\u062f \u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a', 'contactFormMessageMsg': '\u0631\u0633\u0627\u0644\u0629', 'contactFormSendMsg': '\u0625\u0631\u0633\u0627\u0644', 'contactFormToken': 'AEUoTZq00V77yAvsYHd4idiFIIKd:1781855659868', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'Tempnec', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'navMessage': '\u200f\u0625\u0638\u0647\u0627\u0631 \u0627\u0644\u0631\u0633\u0627\u0626\u0644 \u0630\u0627\u062a \u0627\u0644\u062a\u0633\u0645\u064a\u0627\u062a \x3cb\x3eidor\x3c/b\x3e. \x3ca href\x3d\x22https://www.asecurity.pro/\x22\x3e\u0625\u0638\u0647\u0627\u0631 \u0643\u0627\u0641\u0629 \u0627\u0644\u0631\u0633\u0627\u0626\u0644\x3c/a\x3e', 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/3943208901-lbx__ar.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/828616780-lightbox_bundle_rtl.css'}, 'displayModeFull'));