Posts

Showing posts from April, 2024
Show all
Image

HackTheBox-"Lame" [WRITE-UP] {EASY}

Image

[Access Control] Lab 7: User ID controlled by request parameter with password disclosure

Image

[Access Control] lab 6: User ID controlled by request parameter, with unpredictable user IDs

Image

[Access Control] Lab 5: User role controlled by request parameter

Image

[Access Control] Lab 4: Unprotected admin functionality with unpredictable URL

Image

[Access Control] Lab 2: Unprotected admin functionality