IDOR
3 items across 1 section
What It Catches and What It Misses
Part 12 of 16 in the AWS Security Agent: From Zero to Hero series. An honest, data-driven account of where AWS Security Agent falls short, with a practical fix for each weakness, plus why results vary from run to run and why a single run undercounts.
Pentesting With Credentials
Part 8 of 16 in the AWS Security Agent: From Zero to Hero series. I ran the same pentest twice against the same application. The only change was providing a username and password. Findings went from 5 to 13, a 160 percent increase, including two critical JWT bypasses and a privilege escalation.
Custom Security Requirements
Part 6 of 16 in the AWS Security Agent: From Zero to Hero series. How I wrote one custom security requirement, an IDOR authorization check, and turned a 9/10 code review detection rate into 10/10. The five-field form, character limits, and the worked example, all from a controlled experiment.
Need Help with AWS Security?
Our AWS security experts can help you implement best practices across all these topics.
Contact Us