← Access Control in Depth
LabLesson 3 of 5 · 90 min
Lab: mass-assigning into an admin group
ExpertBroken access control / IDOR
Mass-assigning your way into an admin group
Reach an object that was never yours by changing the id that names it.
Open the lab →