Posts

Showing posts with the label burp suite certified practitioner
Show all
Image

[Access Control] Lab 7: User ID controlled by request parameter with password disclosure

Image

[Access Control] lab 6: User ID controlled by request parameter, with unpredictable user IDs

Image

[Access Control] Lab 5: User role controlled by request parameter

Image

[Access Control] Lab 4: Unprotected admin functionality with unpredictable URL

Image

[Access Control] Lab 2: Unprotected admin functionality

Image

[Access Control] Lab 1: Traversal Lab

Image

[Brute-force] Lab 2: 2FA simple bypass

Image

[Brute-force] Lab 1: Username enumeration via different responses