(BAC)Unprotected admin functionality with unpredictable URL

hello hacker Continuing the (BAC) series Today we explain a New point in Brocken Access Control It is Unprotected admin functionality with unpredictable URL

firstly we explain what of the Unprotected admin functionality with unpredictable URL???

The idea here is that the developer is trying to protect the admin's endpoint by assigning it a random value.

okay her we go solve lab

To solved this lab , we need to delete the user Carlos. lits go

We can't do a fuzz here because the value is random, so we'll search for it in the website's JavaScript files within the responses.

okay we make inspect in page source

her we go We found it Admin function is (/admin-7pylkm)

congrat we solved lab

The main idea in this topic

The developer tried to do his job, but he did it wrong. He tried to secure the endpoint in the wrong way, which is by giving it a random value, forgetting that we can get that value in different ways.

How to Fix this

التحقق المركزي على جانب الخادم (Server-Side Authorization)

تطبيق مبدأ الحظر الافتراضي (Deny by Default)

عدم تضمين روابط حصرية في كود جانب العميل (Client-Side Scripts):

okay we finished this lab see we later and we solve a new bug