Check out these HackerPhotos! Nothings wrong here.

Medium Insecure Direct Object Reference

We've created a basic web application called "HackerPhotos" to hightlight some awesome hacker-tagged photography. It is just in BETA and we'd love for you to give it a try and make sure we've not made any mistakes!

You can login to the challenge with the following credentials:

Username: phototest Password: phototest1

Please note the photos are real photos from We have credited each author on their photos. (other information you may find is not real)