Writeups
-
Easy
Method-based access control can be circumvented
method based access control bypass where the admin check only guards POST requests, circumvented by resending the promote action as a GET with a non admin session to upgrade your own account
Access control 3 min -
Easy
URL-based access control can be circumvented
url based access control bypass where a front end blocks /admin but the back end trusts the X-Original-URL header
Access control 3 min
Nothing matched that.
No writeups here yet. Try a broader tag, or clear the filter to see everything.
Clear filters