How to bypass Access Control using Admin Privileges Stored in Cookies (PortSwigger Lab)

This video is part of a Web Application Security training series using PortSwigger Web Security Academy labs. In this episode, we examine an access control vulnerability caused by insecure use of cookies.

The lab demonstrates what can happen when an application stores authorization logic directly in client-side cookies, such as an admin=true or admin=false value, without proper server-side validation.

All demonstrations are performed in a controlled, authorized lab environment for educational purposes.

What this video covers:
What access control is and why it matters
How cookies are used in web applications
Why storing admin privileges in cookies is insecure
How improper authorization checks lead to privilege escalation
Lessons developers and security testers can learn from this issue

Key learning objectives:
Understanding broken access control vulnerabilities
Identifying insecure authorization mechanisms
Recognizing why client-side trust is dangerous
Improving secure design of authentication and authorization systems

This content is intended for:
Cybersecurity students
Ethical hackers
Penetration testers
Web developers learning secure coding practices

Lab Reference:
PortSwigger Web Security Academy – Access Control Labs:
https://portswigger.net/web-security/access-control

Disclaimer:
This video is for educational and defensive security purposes only. All demonstrations were conducted on an intentionally vulnerable application deployed in a lab environment with authorization. Do not attempt to test systems without permission.

#AccessControl #WebSecurity #PortSwigger #EthicalHacking #CyberSecurity #BrokenAccessControl #WebAppSecurity

Видео How to bypass Access Control using Admin Privileges Stored in Cookies (PortSwigger Lab) канала Hack with Elvis