Parameter based Access Control

A parameter based access control is a type of access vulnerability in which an application determines the user's access right based on the on the parameter in the request. These are the:

• query parameters

• request headers

• cookie values

Such access controls are particularly vulnerable since they can be easily exploited by a user by simple changing the parameter values

The Lab:

For this lab the instructions inform that there is an admin panel at the url /admin. In order to solve the lab, a user must be deleted via accessing the admin panel.

As with the previous we start with the home page of the insecure web application.

When logging in with the username and password provided,

Then taking a look at the Post request, the first cookie value can be seen with "Admin" is set to False

Once the value is set to true

The admin panel is become available in currently logged in account

Upon entering the Admin panel, the two user profiles can be seen along with the delete option.

Once the user is deleted, the lab will be passed