Unprotected Admin Functionality with Unpredictable URL - Security Through Obscurity

This labs a broken access control vulnerability where the developer has made use of a concept known as 'security through obscurity'. We demonstrate why this is can be problematic and is an insufficent approach to security by itself.

The full tile of this Portswigger Web Security Academy lab is 'Unprotected Admin Functionality with Unpredictable URL'.

Support This Channel
======================

Please like and subscribe, it means a lot!

Please buy me a coffee so I can continue to make content.

Join our Discord

00:00 Introduction
00:32 Route enumeration
01:29 Source code
02:49 Security through obscurity
05:02 Mitigation
05:15 Solving the lab

[billy-cgqq]

Thank you for the video, the series, and the channel. So much appreciated. I'll try to comment this in all the videos I watch!

[fatima.aljanahi]

bro your videos are genuinely of so much help THANK YOU