Скачать или смотреть Portswigger | Access Control | User role can be modified in user profile | Lab-4

This lab has an admin panel at /admin. It's only accessible to logged-in users with a roleid of 2.
Solve the lab by accessing the admin panel and using it to delete the user carlos.
You can log in to your own account using the following credentials: wiener:peter

Stay tuned for more videos in this series covering OWASP Top 10 access control flaws.
Drop a comment if you have questions, and don’t forget to like & subscribe for daily walkthroughs. 🚀

⚠️ Disclaimer:
This video is intended for **educational and ethical purposes only**. All demonstrations are performed in a controlled lab environment and are meant to raise awareness.

Stay connected:
LinkedIn: / gourav-kumar-438670291
Portfolio: https://github.com/gourav7488/Gourav/...
Twitter: https://x.com/spider_gok
TryHackMe: https://tryhackme.com/p/spidergk

#cybersecurity #ethicalhacking #accesscontrol #PortSwigger #infosec #websecurity #bugbounty #owasp #webapplicationsecurity