<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Insecure Direct Object Reference on Giuseppe D&#39;Andrea</title>
    <link>https://giuseppedandrea.it/tags/insecure-direct-object-reference/</link>
    <description>Recent content in Insecure Direct Object Reference on Giuseppe D&#39;Andrea</description>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Jan 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://giuseppedandrea.it/tags/insecure-direct-object-reference/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Intigriti SantaCloud Challenge - Write-Up</title>
      <link>https://giuseppedandrea.it/posts/intigriti-challenge-santacloud/</link>
      <pubDate>Sat, 03 Jan 2026 00:00:00 +0000</pubDate>
      <guid>https://giuseppedandrea.it/posts/intigriti-challenge-santacloud/</guid>
      <description>&lt;h2 id=&#34;introduction&#34;&gt;&#xA;  Introduction&#xA;  &lt;a class=&#34;heading-link&#34; href=&#34;#introduction&#34;&gt;&#xA;    &lt;i class=&#34;fa-solid fa-link&#34; aria-hidden=&#34;true&#34; title=&#34;Link to heading&#34;&gt;&lt;/i&gt;&#xA;    &lt;span class=&#34;sr-only&#34;&gt;Link to heading&lt;/span&gt;&#xA;  &lt;/a&gt;&#xA;&lt;/h2&gt;&#xA;&lt;p&gt;Hi folks! This write-up documents my solution to &lt;a href=&#34;https://santacloud.intigriti.io/&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;Intigriti&amp;rsquo;s SantaCloud Challenge&lt;/a&gt; created by &lt;a href=&#34;https://x.com/intigriti&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;Intigriti&lt;/a&gt;. The goal was to compromise and retrieve a hidden flag from the &amp;ldquo;SantaCloud&amp;rdquo; portal, a supply chain management system to access inventory management, track distribution, and coordinate logistics.&lt;/p&gt;&#xA;&lt;p&gt;The challenge was relatively straightforward and didn&amp;rsquo;t require sophisticated exploitation techniques. Instead, it rewarded thorough but standard reconnaissance. Despite its simplicity, it was a fun and satisfying solve.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
