Unprotected admin functionality with unpredictable URL

Unprotected admin functionality with unpredictable URL

1: Access the Lab: Unprotected admin functionality with unpredictable URL.

Website: https://portswigger.net/web-security/access-control/lab-unprotected-admin-functionality-with-unpredictable-url

2: Open the View page source.

Shortcut key: Ctrl + U

3: Search for the admin in the View page source code.

Shortcut key: Ctrl + F

4: Go to the My account.

5: Access the Admin Panel.

6: Delete the carlos user.

7: The LAB has been solved.

PortSwigger Labs