(BAC)User role can be modified in user profile

hello hacker Continuing the (BAC) series Today we explain a New point in Brocken Access Control It is User role can be modified in user profile

firstly we explain what of the User role can be modified in user profile???

The idea here is that the developer didn't impose any protection or permission checks on the role parameter, allowing the user to modify its value and send it to the server. The server then trusted this value and updated it directly in the database, enabling the user to change their permissions, such as switching from user to administrator.

okay her we go solve lab

Okay, let's try changing email

like this

respon

okay role= 1 let's try changing from 1 to 2

like this

The role has been changed.

let's try changing id from winere to admin With the method change

like this

We got it

congrat we solved this lab

How to fix

التحقق المركزي على جانب الخادم (Server-Side Authorization)

Never trust any parameter or cookie sent by the client to determine its permissions.

Preventing Mass Assignment of Data

Avoid directly linking user input to database forms (User.update(req.body)

Applying the principle of deniability by default.

okay we finished this lab see we later and we solve a new bug