Insecure Direct Object Reference (IDOR) attacks have been a common vulnerability for decades. It still shows up in lots of big websites including Dell, Reddit, US DoD, GitLab, Shopify, and more. Join Josh Wright for a hackventure in spotting and exploiting this bug as a fun way to get started with bug hunting. Also, #AI.