Get Proton VPN for free: https://go.getproton.me/SHWN or get Proton Mail here: https://go.getproton.me/SHWO

Free Web Hacking Course:    / ranakhalil101  

50% OFF Web Security Academy Course Code: DavidBombal500FF
Academy: https://academy.ranakhalil.com/'>https://academy.ranakhalil.com/

8 hour SQL Injection playlist:    • SQL Injection | Complete Guide  

In this video Rana explains and demonstrates Broken Access Control which is number 1 on the OWASP top 10: https://owasp.org/wwwprojecttopten/

// MENU //
00:00 Intro
00:25 Ads
01:38 Opening
02:36 Broken Access Control
05:04 Authentication
06:11 Session Management
10:31 Access Control
12:16 Types of Access Control
18:19 Broken Access Control Vulnerabilities
23:00 Rana's Channel
25:03 Types of Broken Access Control
30:12 Lab Exercise 1
39:52 Vertical Privilege Escalation
43:19 Lab Exercise 2
48:47 Access Control Vulnerabilities in MultiStep Processes
51:12 Lab Exercise 3
59:21 Prevention
01:04:46 Rana's Platforms
01:07:43 Outro

// Labs used in the video //
Lab #1: https://portswigger.net/websecurity/...
Lab #2: https://portswigger.net/websecurity/...
Lab #3: https://portswigger.net/websecurity/...

// Rana's SOCIAL //
Twitter:   / rana__khalil  
Academy: https://academy.ranakhalil.com/'>https://academy.ranakhalil.com/
Youtube Channel:    / ranakhalil101  
Medium Blog:   / ranakhalil101  
Rana Intigriti Interview:    • Hacker Heroes #5  @rana__khalil (Int...  

// David's SOCIAL //
Discord:   / discord  
Twitter:   / davidbombal  
Instagram:   / davidbombal  
LinkedIn:   / davidbombal  
Facebook:   / davidbombal.co  
TikTok:   / davidbombal  
YouTube Main Channel:    / davidbombal  
YouTube Tech Channel:    / @davidbombaltech  
YouTube Clips Channel:    / @davidbombalofficialclips  
YouTube Shorts Channel:    / @davidbombalshorts  
Apple Podcast: https://davidbombal.wiki/applepodcast
Spotify Podcast: https://open.spotify.com/show/3f6k6gE...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: [email protected]

web
web hacking
web hacking course
web hacking tutorial
xss
owasp
owasp top 10
broken access control
http
https
website
web hacking full course
web hacking pro tips
web hacking book
xss
cross site scripting
portswigger
ajax
jscript
javascript
xss attack
xss video tutorial
xss attack tutorial
xss explained
xss attack example
xss bug bounty
xss tutorial
xss vulnerability
xss vs csrf attack
xss example
xsser
xsssa facebook
xsssa
kali linux
penetration testing
ethical hacking
bug bounty
cross site scripting
crosssite scripting
red teaming
cyber security
kali linux install
kali linux 2022
ethical hacker course
ethical hacker
javascript
ajax
jquery
node js
node js hacking
portswigger

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#hack #webhacking #course