Security PlayBook
Search
Search
Dark mode
Light mode
Explorer
access-control
15 items with this tag.
Aug 09, 2026
Access Control Labs PortSwigger
access-control
idor
Aug 09, 2026
JWT PortSwigger
jwt
broken-access-control
access-control
Aug 09, 2026
JWT RootMe
jwt
broken-access-control
access-control
Aug 09, 2026
Overthewire Natas
recon
access-control
sql-injection
brute-force
Aug 09, 2026
01 - Unprotected admin functionality
access-control
Aug 09, 2026
02 - Unprotected admin functionality with unpredictable URL
broken-access-control
access-control
Aug 09, 2026
03 - User role controlled by request parameter
access-control
Aug 09, 2026
04 - User role can be modified in user profile
access-control
Aug 09, 2026
05 - User ID controlled by request parameter
access-control
idor
Aug 09, 2026
06 - User ID controlled by request parameter, with unpredictable user IDs
access-control
idor
Aug 09, 2026
07 - User ID controlled by request parameter with data leakage in redirect
access-control
idor
Aug 09, 2026
08 - User ID controlled by request parameter with password disclosure
access-control
idor
Aug 09, 2026
09 - Insecure direct object references
access-control
idor
Aug 09, 2026
10 - URL-based access control can be circumvented
access-control
idor
Aug 09, 2026
01- JWT authentication bypass via unverified signature
access-control
jwt