(BAC)Uanprotected admin functionality

hello hacker my name is Abdallh and that is my first Writeb okay today we say about (BAC) Brocken Access Control in portswigger lab specifically lab num1 (Uanprotected admin functionality)

firstly we explain what of the (Uanprotected admin functionality)???

This vulnerability occurs when a web application includes functions or pages intended for administrators only, but the application fails to verify the user's identity and authorization before granting access or execution.

In simple terms: Any ordinary user (or even an unregistered visitor) can access the control panel or use administrator privileges simply by knowing the URL or endpoint.

okay her we go solve lab

To solved this lab , we need to delete the user Carlos. lits go

step num 1 Descovery endpoint by ffuf take URL copy after that past in fuzzing tool (Ffuf)

Okay, now we have two dangerous end points in case of a 200 response. !!!

Let's try them

okay now we access in admin panel whithOUT Authorization

The robots.txt file is a simple text file placed in the root directory of the website. Its main function is to give instructions to search engine crawlers such as Googlebot and Bingbot, telling them what they can or cannot index.

Why would a Pentester care about it?

Because it sometimes reveals sensitive pathways

like this

congrat we solved this lab

The main idea in this lab is You can access in admin function without authorization

How to fix it

To properly close this vulnerability, the following practices must be followed.

1. التحقق المركزي على جانب الخادم (Server-Side Authorization)

Every request to the control panel must pass through a middleware/interceptor that checks the user's session and rank on the server before processing the request.

1. Not relying on disguise
2. Deny by Default

Block access to all destinations and pages by default, and allow access only to users who have explicit permission.

okay we finished this lab see we later and we solve a new bug