2025 Bug Hunting for Access Control Violation (reupload)

▬▬▬▬▬▬✨ Support me ✨▬▬▬▬▬▬
PhonePe: bugooos@ybl

▬▬▬▬▬▬🔗 Links 🔗▬▬▬▬▬▬
Instagram: https://www.instagram.com/its_nexusss/
Twitter: https://twitter.com/cyber_fortress_

▬▬▬▬▬▬✨ Time Stamp ✨▬▬▬▬▬▬
00:00 - 00:58 - Intro
00:59 - 03:56 -What is BAC & types
3:57 - 06:10 - Picking target from Hackerone
06:11 - 07:14 - Configuring burp suite
07:15 - 09:00 - Creating Account using Hackerone alias
09:01 - 10:25 - Setting Target in Burp suite
10:26 - 17:16 - Understanding the request
17:17 - 20:35 - Performing attack on Cookie
20:36 - 27:31 - Performing attack on URL
27:32 - 32:20 - Performing attack on body data
32:21 - 01:03:17 - Performing attack on JWT token
01:03:18 - 01:10:31 - Insecure direct object reference (IDOR)
01:10:32 - 01:19:23 - Other possibilities
01:19:24 - 01:23:26 - Cookie based privilege escalation
01:23:27 - 01:25:31 - brute force for access control
01:25:32 - 01:44:50 - 403 Bypass techniques
01:44:51 - 01:45:40 - Outro

Видео 2025 Bug Hunting for Access Control Violation (reupload) канала BugOoos