mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 19:36:33 +00:00
copilot-swe-agent[bot]
ab9c127df3
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
15 lines
621 B
Markdown
15 lines
621 B
Markdown
# A01 - Broken Access Control
|
|
|
|
## Description
|
|
Access control enforces policy such that users cannot act outside of their intended permissions. Failures typically lead to unauthorized information disclosure, modification, or destruction of all data or performing a business function outside the user's limits.
|
|
|
|
## Common Vulnerabilities
|
|
- Path Traversal
|
|
- IDOR (Insecure Direct Object References)
|
|
- Missing Function Level Access Control
|
|
- Forced Browsing
|
|
- Privilege Escalation
|
|
|
|
## Testing Approach
|
|
Test for access control by manipulating URLs, parameters, and attempting to access resources without proper authorization.
|