alicesec
All Levels/

Direct Access

Insecure Direct Object Reference
Easy

Objective

Your invoice viewer. But whose invoices can you actually see?

Submit Flag