Exploiting Role -Based Access Control Misconfiguration -PortSwigger Lab Walkthrough
Introduction
In this lab, we exploit a flawed access control mechanism where user roles are controlled through a client-side modifiable field. Our goal is to an admin and accessing a restricted /admin page to delete the user carlos.
Understanding the...
