Research Academy Daily Swig
My account Customers About Blog Careers Legal Contact
  1. Web Security Academy
  2. Access control
  3. Lab

Lab: Unprotected admin functionality

APPRENTICE

This lab has an unprotected admin panel.

Solve the lab by deleting the user carlos.

Access the lab

In this topic

Access control vulnerabilities IDOR Access control security models

All topics

SQL injection XSS CSRF Clickjacking DOM-based CORS XXE SSRF Request smuggling Command injection Server-side template injection Insecure deserialization Directory traversal Access control Authentication OAuth authentication Business logic vulnerabilities Web cache poisoning HTTP Host header attacks WebSockets Information disclosure
Try Burp Suite for Free

Find access control vulnerabilities using Burp Suite

Try for free

Find access control vulnerabilities using Burp Suite

The benefits of working through PortSwigger's Web Security Academy

Get started with the Web Security Academy where you can practise exploiting vulnerabilities on realistic targets .. and its free!

Already got an account? Login here