Broken Access Control - Lab #1 Unprotected admin functionality | Long Version

Опубликовано: 07 Февраль 2026
на канале: Rana Khalil
22,837
513

In this video, we cover Lab #1 in the Access Control Vulnerabilities module of the Web Security Academy. This lab has an unprotected admin panel. To solve the lab, we exploit the access control vulnerability to access the admin panel and delete the user carlos user.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://bit.ly/30LWAtE

▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬
00:00 - Introduction
00:12 - Web Security Academy Course (https://bit.ly/30LWAtE)
01:23 - Navigation to the exercise
01:57 - Understand the exercise and make notes about what is required to solve it
02:20 - Exploit the lab
16:03 - Summary
16:16 - Thank You

▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
Notes.txt document: https://github.com/rkhal101/Web-Secur...
Python script: https://github.com/rkhal101/Web-Secur...
Web Security Academy Exercise Link: https://portswigger.net/web-security/...
Rana's Twitter account:   / rana__khalil