Exploiting Role -Based Access Control Misconfiguration -PortSwigger Lab Walkthrough

Introduction In this lab, we exploit a flawed access control mechanism where user roles are controlled through a client-side modifiable field. Our goal is to an admin and accessing a restricted /admin page to delete the user carlos. Understanding the...