Broken Access Control Vulnerabilities | FirstBlood v1 | Bug Bounty Service

Broken Access Control in action.
Check out my courses:
1. The Ultimate Web Application Bug Bounty Hunting Course
www.udemy.com/...
2. Burp Suite Apprentice Web App Penetration Testing Course
www.udemy.com/...
3. Burp Suite Professional Web App Penetration Testing Course
www.udemy.com/...
4. Cyber Awareness Training
www.udemy.com/...

[@aDeveloper-c9o]

Thank you so much for making these videos. I recently finished reading a few books on web app security and these videos are helping me ease my way into bug bounty.

[@martinvoelk]

Glad you like them!

[@hunterone7072]

I have question?
How attacker find victim cookies? Which u use this video.
Administration how can find Normal user cookies? Can u clear me please?

[@martinvoelk]

XSS when the cookies are not httpOnly protected for example

[@TheDeluxesam]

Hi Martin, thank you so much for these videos. They help me a lot more than the usual ones because you explain them so simply! Is there any way i could get in contact with you?

[@martinvoelk]

you can use the contact form on martinvoelk.com Don't wanna post contact email here.

[@FuentesVivian-i8k]

Need a Job doing Research on this

[@martinvoelk]

Try Bug Bounty! Hacker One or Bugcrowd to learn and find vulnerabilities

[@gulfamalij3205]

Informative one ❤

[@martinvoelk]

Glad you liked it

[@Pecinta_wanita11]

Can it be implementing to sensitive data exposure?

[@martinvoelk]

Yes. Broken access control is the vulnerability class and sensitive information disclosure is often the result.

[@ThrowGames]

How can we avoid this issue? Can be implementing Access-Control-Origin headers?

[@martinvoelk]

No, what you are referring to is CORS (cross site origin resource sharing). That would allow you to losen the Same Origin Policy for cross site interaction. In this case here, authorization checks need to be implemented so that it's verified that the asset belongs to the authenticated user.

[@ThrowGames]

@@martinvoelk so the way to fix it is comproving if user is logged in?

[@ThrowGames]

And... Maybe if has the needed permissions to update the record or something like that?

[@haanrey]

thnk youf ro mqking video

[@martinvoelk]

No problem