Learn about broken access control testing in this comprehensive video from Bugcrowd University. Explore various types of access control vulnerabilities, including Insecure Direct Object References (IDOR), Local File Inclusion, Path Traversal, and logic flaws. Discover techniques for identifying and exploiting these vulnerabilities, such as parameter manipulation and forceful browsing. Gain insights into using tools like Burp Intruder for testing, and understand how to rate vulnerabilities using the Bugcrowd VRT. Delve into specific topics like GUID-based and hash-based IDORs, request methods, and auxiliary tips for effective testing. Perfect for aspiring white hat hackers and bug bounty hunters looking to enhance their skills in identifying and reporting access control issues.
Bugcrowd University - Broken Access Control Testing