Introduction In this article, I am going to share how I found an IDOR in the support system of a multi-national company which helped me disclose everyone's ticket via brute-forcing. To get a better understanding of IDOR please see the link here. In t...