Completed
Request methods
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Bugcrowd University - Broken Access Control Testing
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Module Trainer
- 3 Module Outline
- 4 Module Reading
- 5 Introduction to Access Control bugs
- 6 Simple numeric IDOR
- 7 Bugcrowd VRT Rating
- 8 GUID based IDOR (cont.)
- 9 Hash based IDOR
- 10 Request methods
- 11 Local File Inclusion and Path Traversal
- 12 Static pages & "forceful browsing"
- 13 Static files
- 14 Direct function calling
- 15 Parameter Manipulation
- 16 Logic Flaws
- 17 Auxiliary Tips
- 18 Likely parameters/keyword to check for IDOR
- 19 COTS, OSS, and paywalled applications
- 20 Create a function matrix for MFLAC
- 21 Burp Intruder
- 22 References
