mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 19:36:33 +00:00
Add comprehensive OWASP Top 10 directory structure with injection payloads
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
@@ -0,0 +1,14 @@
|
||||
# A01 - Broken Access Control
|
||||
|
||||
## Description
|
||||
Access control enforces policy such that users cannot act outside of their intended permissions. Failures typically lead to unauthorized information disclosure, modification, or destruction of all data or performing a business function outside the user's limits.
|
||||
|
||||
## Common Vulnerabilities
|
||||
- Path Traversal
|
||||
- IDOR (Insecure Direct Object References)
|
||||
- Missing Function Level Access Control
|
||||
- Forced Browsing
|
||||
- Privilege Escalation
|
||||
|
||||
## Testing Approach
|
||||
Test for access control by manipulating URLs, parameters, and attempting to access resources without proper authorization.
|
||||
Reference in New Issue
Block a user