Bugcrowd University - Broken Access Control Testing

[@yuvraj6279]

After OWASP NO 1 in 2021

[@hackersguild8445]

This was the best talk. Just loved this one. I guess I will watch it again in a day or so. :)

[@nazneenzafar743]

Thank you for this presentation Jason.

[@DJSubstyla]

Great content!! 😎 Thank you very much Jason 🙌

[@souhaillepacifique7572]

❤🙏 thanks man happy to know you

[@Bo-cv9ic]

This is amazing information. Thank you for this.

[@lenevoyogatab3]

on point, thankssettings page or profile page of an application has lot of idor possibility, enjoy

[@dxsp1d3r]

Waiting for the next module Very Well Explained

[@Pecinta_wanita11]

Thanks for sharing.. god bless you ❤

[@saivenkatmaheshwaram9868]

superb video and clear explanation..........

[@InfoSecIntel]

This is great I have one question why would the ADMIN in uppercase be accessible when in lowercase it isn’t? Does that just mean the admin in lowercase file doesn’t exist but the ADMIN in uppercase page does?

[@noy5626]

I think it has to do with a filter bypass. E.g. the waf is checking for /admin but when the request reaches the backend system, it lower cases the path by default. Thus, putting /ADMIN bypasses the waf. I could be wrong. I’m still new too. Hope that helps :)

[@elijahrodgers9029]

@@noy5626 you're right

[@cacurazi]

what is GUID?

[@tanercoder1915]

where can I find an the videos of modules?

[@adamde1990]

Does anyone know of any hacks/data breaches that have occured as a result of broken access control that i could read up on?

[@benjaminmcewan5313]

Thanks for posting.. your content is awesome always

[@R3v3rs3_sh3ll]

Thank you

[@youfather38392]

Who's here after 4 years in Aug 2022

[@aryzen2781]

=]

[@nazneenzafar743]

2023

[@youfather38392]

@@nazneenzafar743 Good to see you

[@anfsec]

i need this ppt

[@haroonrehman9489]

Are These Tricks relevant in 2022?

[@aryzen2781]

yes, broken access control jumped from 5th to number 1 most common vulnerabilites.

[@satishranga5264]

please share sql vulunerabilitrs sql I sql Boolean timebase

[@peterchari3839]

Informative stuff

[@syednooruddin2017]

Plz make us understand to make a video

[@X1Aman1X]

HEY!! PLEASE UPDATE THE CONTENT

[@manojd3368]

not clearly audible.. Please change

[@fauzibariqmahya8667]

i have been finish

[@mouhssineezzahy8160]

up pro go on please