Skip to contentExploitQuest
Join free
LearnWeb Application SecurityBroken Access Control

Chapter 02 of 05 · Web Application Security

Broken Access Control

The application checks that you are logged in and forgets to check that the thing you asked for is yours. Where that gap comes from, what it hands over, and the check that has to happen on every object, every time.

FreeMedium
3 lessons8 quiz questionsabout 8 minup to 60 XP
Loop in progress
  1. Attack
  2. Telemetry
  3. Fix
  4. Detection
defensive beats coming
Start this chapterThe Check That Never Ran
  1. The Check That Never Ran2 min
  2. Walk To The Account3 min
  3. The Check On Every Object3 min
  4. Practice quiz8 questions