Broken Access Control - Lab #11 Insecure direct object references | Short Version
In this video, we cover Lab #11 in the Access Control Vulnerabilities module of the Web Security Academy. This lab stores user chat logs directly on the server's file system, and retrieves them using static URLs. To solve the lab, we find the password for the user carlos, and log into his account.
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://bit.ly/30LWAtE
▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
Detailed video: • Broken Access Control - Lab #11 Insec...
Notes.txt document: https://github.com/rkhal101/Web-Secur...
Web Security Academy Exercise Link: https://portswigger.net/web-security/...
Rana's Twitter account: / rana__khalil