In this video, we cover Lab #10 in the Access Control Vulnerabilities module of the Web Security Academy. This lab has user account page that contains the current user's existing password, prefilled in a masked input. To solve the lab, we retrieve the administrator's password, then use it to delete carlos. ▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬ Buy my course: https://bit.ly/30LWAtE ▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬ 00:00 - Introduction 00:13 - Web Security Academy Course (https://bit.ly/30LWAtE) 01:24 - Navigation to the exercise 02:01 - Understand the exercise and make notes about what is required to solve it 02:33 - Exploit the lab 28:11 - Summary 28:24 - Thank You ▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬ Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/broken-access-control/lab-10/notes.txt Python script: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/broken-access-control/lab-10/access-control-lab-10.py Web Security Academy Exercise Link: https://portswigger.net/web-security/access-control/lab-user-id-controlled-by-request-parameter-with-password-disclosure Rana's Twitter account: https://twitter.com/rana__khalil