IDOR and Broken Access Control — Study Resources & PYQs

Curated resources, past papers and PYQs for IDOR and Broken Access Control.

Study resources

Access Control Vulnerabilities (Article) — PortSwigger's Web Security Academy definitive guide to IDOR and broken access control.
IDOR Explained (Video) — A practical demonstration of exploiting insecure direct object references.
Access Control Cheat Sheet (Article) — OWASP's own official cheat sheet on authorization and access control.