Access control 7 | User ID controlled by request parameter with data leakage in redirect
Steps to solve:
1. login as wiener:peter
2. change url from
/my-account?id=wiener
to
/my-account?id=carlos
3. Check burpsuite for /my-account?id=carlos 302. The response contains carlos related information, including APIs.
This video is for Educational purposes only.
https://portswigger.net/web-security/...
https://portswigger.net/web-security/...
Want me to train you for Practical courses and Global Certifications? or
Want to hire me or our students for VAPT or SOC?
Email: [email protected]
Thank you for your awesome support:
https://buymeacoffee.com/TORHAT
Paytm: https://tinyurl.com/TORHAT
Socials:
Whatsapp: https://chat.whatsapp.com/JEWGrpUOqXx...
Linkedin: / mukesh-pyda
Twitter: / @oxtorhat
Telegram Group: https://t.me/+a9nwT9mdgeJhMDA1
Discord: / discord
Email: [email protected]
#TORHAT #portswigger #Cybersecurity #EthicalHacking #HackingLab #SecurityChallenge #CTF (Capture The Flag) #Infosec #WebSecurity #CyberChallenge #BugBounty #CaptureTheFlag #HackingChallenge #HackMe #SecurityTraining #password #accesscontrol #DebugPage #bugbounty #bugbountyhunter #bugbountytips #bugbounty #bugbountyhunter #bugbountytips