Access control 12 | Multi-step process with no access control on one step

Did we help you today? Show us your love here:
https://buymeacoffee.com/TORHAT
Paytm: https://tinyurl.com/TORHAT

Want us to train you for courses and certifications?
https://hmcyberacademy.com/learners.html

Want to hire us or our students for VAPT or SOC?
https://hmcyberacademy.com/companies.html

This video is for Educational purposes only.
https://portswigger.net/web-security/access-control
https://portswigger.net/web-security/access-control/lab-multi-step-process-with-no-access-control-on-one-step

Steps to solve:
1. Login as admin and upgrade carlos user.
2. Send the second confirmation POST request to repeater.
3. Logout as admin and login as wiener. Copy wiener session cookie.
4. Go to repeater and replace admin session cookie with wiener session cookie.
5. Change parameter to username=wiener. Send the request.

Socials:
Whatsapp: https://chat.whatsapp.com/JEWGrpUOqXxGYZas9901Ib?mode=wwc
Linkedin: https://www.linkedin.com/company/hmcyberacademy
Twitter: https://twitter.com/hmcyberacademy
Telegram Group: https://t.me/+a9nwT9mdgeJhMDA1
Instagram: https://www.instagram.com/hmcyberacademy/
Discord: https://discord.com/invite/caMKZRBjty
Rumble: https://rumble.com/c/hmcyberacademy
Email: [email protected]

#hmcyberacademy #portswigger #Cybersecurity #EthicalHacking #HackingLab #SecurityChallenge #CTF (Capture The Flag) #Infosec #WebSecurity #CyberChallenge #BugBounty #CaptureTheFlag #HackingChallenge #HackMe #SecurityTraining #password #accesscontrol #DebugPage #bugbounty #bugbountyhunter #bugbountytips #bugbounty #bugbountyhunter #bugbountytips