Broken Access Control - Lab #9 UID controlled by param with data leakage in redirect | Long Version

In this video, we cover Lab #9 in the Access Control Vulnerabilities module of the Web Security Academy. This lab contains an access control vulnerability where sensitive information is leaked in the body of a redirect response. To solve the lab, we obtain the API key for the user carlos and submit it as the solution. ▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬ Buy my course: https://bit.ly/30LWAtE ▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬ 00:00 - Introduction 00:15 - Web Security Academy Course (https://bit.ly/30LWAtE) 01:25 - Navigation to the exercise 02:07 - Understand the exercise and make notes about what is required to solve it 03:13 - Exploit the lab 22:32 - Summary 22:45 - Thank You ▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬ Notes.txt document: https://github.com/rkhal101/Web-Secur... Python script: https://github.com/rkhal101/Web-Secur... Web Security Academy Exercise Link: https://portswigger.net/web-security/... Rana's Twitter account:   / rana__khalil