Business Logic Vulnerabilities - Lab #3 Inconsistent security controls | Short Version

In this video, we cover Lab #3 in the Business Logic Vulnerabilities module of the Web Security Academy. This lab's flawed logic allows arbitrary users to access administrative functionality that should only be available to company employees. To solve the lab, we access the admin panel and delete the Carlos user. ▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬ Buy my course: https://academy.ranakhalil.com/p/web-... ▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬ Notes.txt document: https://github.com/rkhal101/Web-Secur... Web Security Academy Exercise Link: https://portswigger.net/web-security/... Rana's Twitter account:   / rana__khalil