2 Videos for Authorization 01

Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
Exploitation of Authorisation 01
In this video, we explore the exploitation of the Authorization 01 challenge from the essential badge on PentesterLab. By iterating through URL paths, we uncover hidden information that isn't directly linked on the web application.

Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
Authorization 01: Code Review
In this video, we conduct a code review of the Exercise Authorization 01 from PentesterLab’s essential badge. We analyze the main source file, exercise.rb, to identify and understand a critical security flaw related to Insecure Direct Object Reference (IDOR).