3 ms·
Your intent could be simply to find out whether you want to trust the website with your own information. Merely attempting an SQLI or an IDOR doesn't mean you
by ScottBurson 9y ago
Your intent could be simply to find out whether you want to trust the website with your own information. Merely attempting an SQLI or an IDOR doesn't mean you have intent to download other users' information for your personal gain.
- zokier 9y agoThe question of intent would be about the access only (i.e. "did you intend to access data without authorization"), and does not extend to further motives of why you would be doing such access.