Referer-based access control | Apprentice2026-06-11 [Updated: 2026-07-15]#training #PortSwigger #writeups #web-exploitation [Read more]
Multi-step process with no access control on one step | Apprentice2026-06-11 [Updated: 2026-07-15]#training #PortSwigger #writeups #web-exploitation [Read more]
Method-based access control can be circumvented | Apprentice2026-06-11 [Updated: 2026-07-15]#training #PortSwigger #writeups #web-exploitation [Read more]
URL-based access control can be circumvented | Apprentice2026-06-11 [Updated: 2026-07-15]#training #PortSwigger #writeups #web-exploitation [Read more]
User role can be modified in user profile | Apprentice2026-06-11 [Updated: 2026-07-15]#training #PortSwigger #writeups #web-exploitation [Read more]
Unprotected admin functionality with unpredictable URL | Apprentice2026-06-11 [Updated: 2026-07-15]#training #PortSwigger #writeups #web-exploitation [Read more]
User role controlled by request parameter | Apprentice2026-06-02 [Updated: 2026-07-15]#training #PortSwigger #writeups #web-exploitation [Read more]
Unprotected Admin Functionality | Apprentice2026-06-02 [Updated: 2026-07-15]#training #PortSwigger #writeups #web-exploitation My first lab![Read more]