Bugcrowd University - Broken Access Control Testing

Welcome to Bugcrowd University - Broken Access Control Testing. Defined by OWASP: "Access control, sometimes called authorization, is how a web application grants access to content and functions to some users and not others."
Join us for free and begin your journey to become a white hat hacker. Bugcrowd University was created to help you learn the basics of hacking and bug bounty hunting. Learn more: bugcrowd.com/university

[@hackersguild8445]

This was the best talk. Just loved this one. I guess I will watch it again in a day or so. :)

[@yuvraj6279]

After OWASP NO 1 in 2021

[@nazneenzafar743]

Thank you for this presentation Jason.

[@DJSubstyla]

Great content!! 😎 Thank you very much Jason 🙌

[@Bo-cv9ic]

This is amazing information. Thank you for this.

[@dxsp1d3r]

Waiting for the next module Very Well Explained

[@souhaillepacifique7572]

❤🙏 thanks man happy to know you

[@benjaminmcewan5313]

Thanks for posting.. your content is awesome always

[@R3v3rs3_sh3ll]

Thank you

[@lenevoyogatab3plus740]

on point, thankssettings page or profile page of an application has lot of idor possibility, enjoy

[@saivenkatmaheshwaram9868]

superb video and clear explanation..........

[@peterchari3839]

Informative stuff

[@adamde1990]

Does anyone know of any hacks/data breaches that have occured as a result of broken access control that i could read up on?

[@tanercoder1915]

where can I find an the videos of modules?

[@InfoSecIntel]

This is great I have one question why would the ADMIN in uppercase be accessible when in lowercase it isn’t? Does that just mean the admin in lowercase file doesn’t exist but the ADMIN in uppercase page does?

[@noy5626]

I think it has to do with a filter bypass. E.g. the waf is checking for /admin but when the request reaches the backend system, it lower cases the path by default. Thus, putting /ADMIN bypasses the waf. I could be wrong. I’m still new too. Hope that helps :)

[@elijahrodgers9029]

@@noy5626 you're right

[@satishranga5264]

please share sql vulunerabilitrs sql I sql Boolean timebase

[@cacurazi]

what is GUID?

[@anfsec]

i need this ppt

[@mouhssineezzahy8160]

up pro go on please

[@syednooruddin2017]

Plz make us understand to make a video

[@fauzibariqmahya8667]

i have been finish

[@haroonrehman9489]

Are These Tricks relevant in 2022?

[@aryzen2781]

yes, broken access control jumped from 5th to number 1 most common vulnerabilites.

[@youfather38392]

Who's here after 4 years in Aug 2022

[@aryzen2781]

=]

[@nazneenzafar743]

2023

[@youfather38392]

@@nazneenzafar743 Good to see you

[@X1Aman1X]

HEY!! PLEASE UPDATE THE CONTENT

[@manojd3368]

not clearly audible.. Please change