Join us on May 15 for a live demo of how Burp Suite DAST solves real-world security challenges.            Register Now
Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Lab: User ID controlled by request parameter

APPRENTICE

This lab has a horizontal privilege escalation vulnerability on the user account page.

To solve the lab, obtain the API key for the user carlos and submit it as the solution.

You can log in to your own account using the following credentials: wiener:peter

ACCESS THE LAB

Solution

  1. Log in using the supplied credentials and go to your account page.
  2. Note that the URL contains your username in the "id" parameter.
  3. Send the request to Burp Repeater.
  4. Change the "id" parameter to carlos.
  5. Retrieve and submit the API key for carlos.

Community solutions

Rana Khalil
Michael Sommer (no audio)

Register for free to track your learning progress

The benefits of working through PortSwigger's Web Security Academy

  • Practise exploiting vulnerabilities on realistic targets.

  • Record your progression from Apprentice to Expert.

  • See where you rank in our Hall of Fame.

Already got an account? Login here

Try Burp Suite for Free

Find access control vulnerabilities using Burp Suite

Try for free