IDOR, and Leaked GUID

Continuing from yesterday's post on Broken Access Control, today I worked through three more PortSwigger Web Security Academy labs. Same category, three more distinct mechanisms — and one genuinely su