Bugcrowd University - Broken Access Control Testing

[@hackersguild8445]

This was the best talk. Just loved this one. I guess I will watch it again in a day or so. :)

[@yuvraj6279]

After OWASP NO 1 in 2021

[@nazneenzafar743]

Thank you for this presentation Jason.

[@DJSubstyla]

Great content!! 😎 Thank you very much Jason 🙌

[@souhaillepacifique7572]

❤🙏 thanks man happy to know you

[@Bo-cv9ic]

This is amazing information. Thank you for this.

[@dxsp1d3r]

Waiting for the next module Very Well Explained

[@Pecinta_wanita11]

Thanks for sharing.. god bless you ❤

[@lenevoyogatab3]

on point, thankssettings page or profile page of an application has lot of idor possibility, enjoy

[@saivenkatmaheshwaram9868]

superb video and clear explanation..........

[@youfather38392]

Who's here after 4 years in Aug 2022

[@aryzen2781]

=]

[@nazneenzafar743]

2023

[@youfather38392]

@@nazneenzafar743 Good to see you

[@benjaminmcewan5313]

Thanks for posting.. your content is awesome always

[@haroonrehman9489]

Are These Tricks relevant in 2022?

[@aryzen2781]

yes, broken access control jumped from 5th to number 1 most common vulnerabilites.

[@R3v3rs3_sh3ll]

Thank you

[@InfoSecIntel]

This is great I have one question why would the ADMIN in uppercase be accessible when in lowercase it isn’t? Does that just mean the admin in lowercase file doesn’t exist but the ADMIN in uppercase page does?

[@noy5626]

I think it has to do with a filter bypass. E.g. the waf is checking for /admin but when the request reaches the backend system, it lower cases the path by default. Thus, putting /ADMIN bypasses the waf. I could be wrong. I’m still new too. Hope that helps :)

[@elijahrodgers9029]

@@noy5626 you're right

[@tanercoder1915]

where can I find an the videos of modules?

[@cacurazi]

what is GUID?

[@anfsec]

i need this ppt

[@adamde1990]

Does anyone know of any hacks/data breaches that have occured as a result of broken access control that i could read up on?

[@peterchari3839]

Informative stuff

[@syednooruddin2017]

Plz make us understand to make a video

[@satishranga5264]

please share sql vulunerabilitrs sql I sql Boolean timebase

[@X1Aman1X]

HEY!! PLEASE UPDATE THE CONTENT

[@fauzibariqmahya8667]

i have been finish

[@manojd3368]

not clearly audible.. Please change

[@mouhssineezzahy8160]

up pro go on please