Unprotected Admin Functionality with Unpredictable URL - Security Through Obscurity
This labs a broken access control vulnerability where the developer has made use of a concept known as 'security through obscurity'. We demonstrate why this is can be problematic and is an insufficent approach to security by itself.
The full tile of this Portswigger Web Security Academy lab is 'Unprotected Admin Functionality with Unpredictable URL'.
Support This Channel
======================
Please like and subscribe, it means a lot!
Please buy me a coffee so I can continue to make content.
https://buymeacoffee.com/zenshell
Join our Discord
/ discord
00:00 Introduction
00:32 Route enumeration
01:29 Source code
02:49 Security through obscurity
05:02 Mitigation
05:15 Solving the lab