2 Videos for Authorization 05

Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
Authorisation 05
In this video, we explore the Authorization 05 challenge of the essential badge on PentesterLab. We demonstrate how to use mass assignment to gain admin privileges during a profile update request.

Access to videos for this exercise is only available with PentesterLab PRO
GOPRO
Authorisation 05: Code Review
In this video, we perform a code review of the Authentication 05 challenge for the essential badge. We examine the application's structure and identify a significant security flaw related to user privilege escalation.