Skip to main content

Multi-step process with no access control on one step

$ tldr PortSwigger · Access Control Vulnerabilities

Solve the lab

Resources by skill

Access Control / IDOR

Comments & tips

Solved this lab a different way? Share it here — comments live in GitHub Discussions.
Last updated: 2026-06-07