Authentication & Authorization (Challenge 2 )Missing Function Level Access Control

Cyber Security Web Application Penetration Testing Professional
1

Hey Guys,
what i tryed so far is to, spider the website and found a panel (i dont know how this site is regarding spoilers so wont name the name) in challenge 1 i succesfully completed the challenge, and expected to get a secret but it was blank. so i dont have anything i can use on that said panel, i already tryed username enumeration with patator, to see if i could brute a user, also tryed SQLI and spidering from that said panel to other functionality.

Any nudges are very welcome.

Best regards.

3

Yea but not when its a challenge, else i didnt have to post here but thanks for the reply.

1 Like