Skip to content

Payloads64

Test payloads from PayloadsAllTheThings by weakness class, passage by passage with their code blocks.

Weakness:Insecure Direct Object Reference
Clear
Clear filters1 of 64 topics
Payload topics
TopicPassagesCode blocks
Insecure Direct Object Reference
Insecure Direct Object ReferencesInsecure Direct Object References (IDOR) is a security vulnerability that occurs when an application allows users to directly access or modify objects (such as files, database records, or URLs) based on user-supplied input, without sufficient access controls. This means that if a user changes a par…82

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page. From PayloadsAllTheThings by Swissky and contributors. MIT License, Copyright (c) 2019 Swissky. The repository. Data as of 2026-11-15.