chain-idor-to-priv-esc

name: chain-idor-to-priv-esc description: Build chains where IDOR enables privilege escalation and high-impact control-plane actions. metadata: subdomain: web-exploitation when_to_use: "idor chain privilege escalation control plane high impact horizontal vertical authorization bypass"

Chain: IDOR to Privilege Escalation

Canonical path

1. IDOR modifies another user's sensitive object.
2. Escalate role/permissions or steal recovery token.
3. Perform admin-level action and show impact.

Validation

Demonstrate before/after authorization state and downstream privileged action evidence.