<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>IDOR on L3B4nk4</title><link>https://blog.b4nk4.tech/tags/idor/</link><description>Recent content from L3B4nk4</description><generator>Hugo</generator><language>en-us</language><copyright>All articles on this blog are licensed under the BY-NC-SA license agreement unless otherwise stated. Please indicate the source when reprinting!</copyright><lastBuildDate>Sun, 16 Nov 2025 10:45:12 +0200</lastBuildDate><atom:link href="https://blog.b4nk4.tech/tags/idor/index.xml" rel="self" type="application/rss+xml"/><item><title>A Very Small Locker</title><link>https://blog.b4nk4.tech/post/a-very-small-locker/</link><pubDate>Sun, 16 Nov 2025 10:45:12 +0200</pubDate><guid>https://blog.b4nk4.tech/post/a-very-small-locker/</guid><description>
<![CDATA[<h1>A Very Small Locker</h1><p>Author: L3B4nk4()</p>
        
          A web challenge with two paths: an unintended NoSQL injection shortcut, and the intended chain of business logic, XSS, and IDOR.
        
        <hr><p>Published on 2025-11-16 at <a href='https://blog.b4nk4.tech/'>L3B4nk4</a>, last modified on 2025-11-16</p>]]></description><category>writeup</category></item></channel></rss>