Thread by @CristiVlad25

Unlocking the Secrets: Breaking Access Controls, the basics 👇

(from the AI model I'm currently training on security reports)

1. Direct object reference

This occurs when an attacker is able to access a resource directly by manipulating a parameter in the URL or form data.

2. Horizontal privilege escalation

This occurs when an attacker is able to access resources or perform actions that are intended for another user with the same level of access.

3. Vertical privilege escalation

This occurs when an attacker is able to access resources or perform actions that are intended for a user with a higher level of access.

4. Forceful browsing

This occurs when an attacker is able to access resources that are not intended to be publicly accessible by guessing or brute-forcing the URL.

5. Insufficient authorization checks

This occurs when an application fails to properly check whether a user is authorized to access a resource or perform an action.

6. Session fixation

This occurs when an attacker is able to hijack a user's session by manipulating the session ID.

7. What is a question you'd ask the AI given its training on thousands of reports? 👇

#pentesting #cybersecurity #infosec #ai #SecGPT #bugbounty #bugbountytips #ethicalhacking