← Web Security Foundations
LabLesson 3 of 5 · 20 min
Lab: your neighbour's invoice
ApprenticeBroken access control / IDOR
The invoice with your neighbour's name on it
Reach an object that was never yours by changing the id that names it.
Open the lab →