Authorization

2 articles

Browse all articles about Authorization. Explore expert insights and research from the Shinobi team.

One Parameter to Rule Them All: How a User Flaw Unlocked an Admin Fortress

How Shinobi exploited a single vulnerable parameter in an EV charging platform to cross security boundaries and gain full administrative access.

Abhishek Gehlot

2025-10-06

9 min read

Authorization

IDOR

The Ghost in the API: How Shinobi Turned a Single Flaw into Super Admin Access

A journey through an IoT platform where learning from rejection led to uncovering a complete authorization breakdown and a hidden Super Admin account.

Abhishek Gehlot

2025-10-06

10 min read