# Broken Acess Controls

- [Insecure direct object references (IDOR)](/ethical-hacking/web-app-pentesting/broken-acess-controls/insecure-direct-object-references-idor.md)
- [Insecure direct object references lab](/ethical-hacking/web-app-pentesting/broken-acess-controls/insecure-direct-object-references-idor/insecure-direct-object-references-lab.md)
