Security PlayBook
Search
Search
Dark mode
Light mode
Explorer
Home
❯
04-Labs
❯
PortSwigger Academy Labs
❯
Access Control Labs PortSwigger
Access Control Labs PortSwigger
Properties
2
description
solutions of the Access Control Labs on PortSwigger Academy
tags
access-control
,
idor
solutions of the Access Control Labs on PortSwigger Academy
10 items under this folder.
Aug 09, 2026
01 - Unprotected admin functionality
access-control
Aug 09, 2026
02 - Unprotected admin functionality with unpredictable URL
broken-access-control
access-control
Aug 09, 2026
03 - User role controlled by request parameter
access-control
Aug 09, 2026
04 - User role can be modified in user profile
access-control
Aug 09, 2026
05 - User ID controlled by request parameter
access-control
idor
Aug 09, 2026
06 - User ID controlled by request parameter, with unpredictable user IDs
access-control
idor
Aug 09, 2026
07 - User ID controlled by request parameter with data leakage in redirect
access-control
idor
Aug 09, 2026
08 - User ID controlled by request parameter with password disclosure
access-control
idor
Aug 09, 2026
09 - Insecure direct object references
access-control
idor
Aug 09, 2026
10 - URL-based access control can be circumvented
access-control
idor