Insecure direct object references
Laboratorio de Portswigger sobre Broken Access Control
Justice-Reaper
User ID controlled by request parameter with password disclosure
Laboratorio de Portswigger sobre Broken Access Control
User ID controlled by request parameter with data leakage in redirect
Laboratorio de Portswigger sobre Broken Access Control
User ID controlled by request parameter, with unpredictable user IDs
Laboratorio de Portswigger sobre Broken Access Control
User ID controlled by request parameter
Laboratorio de Portswigger sobre Broken Access Control
User role can be modified in user profile
Laboratorio de Portswigger sobre Broken Access Control
User role controlled by request parameter
Laboratorio de Portswigger sobre Broken Access Control
Unprotected admin functionality with unpredictable URL
Laboratorio de Portswigger sobre Broken Access Control
Unprotected admin functionality
Laboratorio de Portswigger sobre Broken Access Control
Information disclosure in version control history
Laboratorio de Portswigger sobre Information Disclosure