Business Logic Vulnerabilities - Lab #7 Weak isolation on dual-use endpoint | Short Version

In this video, we cover Lab #7 in the Business Logic Vulnerabilities module of the Web Security Academy. This lab makes a flawed assumption about the user's privilege level based on their input. As a result, we can exploit the logic of its account management features to gain access to arbitrary users' accounts. To solve the lab, we access the administrator account and delete Carlos. You can log in to your own account using the following credentials: wiener:peter ▬ ✨ My Academy ✨ ▬▬▬▬▬▬▬▬▬▬ Subscribe to Academy: https://academy.ranakhalil.com/p/all-... ▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬ Python script: https://github.com/rkhal101/Web-Secur... Notes.txt document: https://github.com/rkhal101/Web-Secur... Web Security Academy Exercise Link: https://portswigger.net/web-security/... Rana's Twitter account:   / rana__khalil