Commonly Misunderstood Bugs: Authorization Based Vulnerabilities

Let's discuss common mistakes people make when reporting Authorization based vulnerabilities.

▬ Participate in the building of content ▬▬▬
✭ Twitch:

▬ Continue the discussion ▬▬▬▬▬▬▬▬
✭ Twitter:
✩ Facebook:

▬ Table of Contents ▬▬▬▬▬▬▬▬▬▬▬
0:00 Introduction
1:13 Video Goal and Intentions
1:41 Forgot Password Token Mistakes
2:09 What is GET data
2:41 Forgot Password Potential Risks
3:25 Forgot Password Reset over HTTP
4:29 Session Expiration Mistakes
6:14 CSRF on Logout Mistake
7:40 Closing
8:20 Learn More - Portswigger
8:37 Learn More - Pentesterlab Essentials Badge
9:00 Understanding the Customer or Client
9:46 Learn More - Next Steps

hackerone,bugcrowd,intigriti,synack,yeswehack,cobalt,bug bounty,bug bounties,hacking,hacker,burp suite,burpsuite,osint,recon,dnsgrep,rapid7,