Bug bounty tips for broken access control on BurpSuite Part 1: Using match replace and Authmatrix

 

In this tutorial, you will learn how I test for broken access control and achieve privilege escalation on web applications. I go from a manual to semi-automated approaches.All the testing approaches are free and accessible to everyone, not just Burp Pro users. 📙 Become a successful bug bounty hunter: https://thehackerish.com/a-bug-bounty-hunting-journey-book 🆓 Download your FREE Web hacking LAB and starting hacking NOW: https://thehackerish.com/owasp-top-10-lab-vm-free 🌐 Read more on the blog: https://thehackerish.com 💪🏻 Support this work: https://thehackerish.com/how-to-support - Facebook Page: https://www.facebook.com/thehackerish - Follow us on Twitter: https://twitter.com/thehackerish - Listen on Anchor: https://anchor.fm/thehackerish - Listen on Spotify: https://open.spotify.com/show/4Ht8jEbPzyZnfbIlhFG91x - Listen on Google Podcasts: https://podcasts.google.com/?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy8xYTVkYTgxYy9wb2RjYXN0L3Jzcw%3D%3D Soundtrack: Daily Beetle by Kevin MacLeod is licensed under a Creative Commons Attribution license (https://creativecommons.org/licenses/by/4.0/)Source: http://incompetech.com/music/royalty-free/index.html?isrc=USUAN1500025Artist: http://incompetech.com/ Thumbnail: Photo by Chris Barbalis on Unsplash