This is a vulnerable web application I developed for my Database Security class at Boston University. It contains possible IDOR and session hijacking attacks in a pseudo-realistic banking web app. The application is built using the LAMP stack.
Broken Access Control Labs (IDOR)
CVE-2021-42562: Improper Access Control in MITRE Caldera
Add a description, image, and links to the insecure-direct-object-reference topic page so that developers can more easily learn about it.
To associate your repository with the insecure-direct-object-reference topic, visit your repo's landing page and select "manage topics."