Leunam's PortSwigger

Ctrlk

01 SQL Injection
02 Cross-site scripting
03 CSRF
04 Clickjacking
06 CORS
10 OS Comand Injection
12 Path traversal
13 Access Control Vulnerability
14 Authentication
15 WebSockets
16 Web cache deception
20 HTTP Host header attacks
22 File Upload vulnerabilities
28 NoSQL Injection
29 API Testing

Powered by GitBook

On this page

13 Access Control Vulnerability

05 Lab: User ID controlled by request parameter

Solución

Previous04 Lab User role can be modified in user profile 17efab5460ec808c8da6e67d210bf5a2 Next07 Lab: User ID controlled by request parameter with data leakage in redirect

Last updated 9 months ago