Category Archives: webgoat

Broken access control – (Missing Function Level Access Control lab), keeps returning error for user hash [closed]

Posted on by

WebGoat V2023.3 – (A1) Broken access Control – Missing Function Level Access Control lab
I managed to pull the users/hashes list by changing the GET request for /WebGoat/access-control/users adding Content-Type: application/json
Got the li… Continue reading Broken access control – (Missing Function Level Access Control lab), keeps returning error for user hash [closed]→

Thinking of a Cybersecurity Career? Read This

Posted on by

Thousand of people graduate from colleges and universities each year with cybersecurity or computer science degrees only to find employers are less than thrilled about their hands-on, foundational skills. Here’s a look at a recent survey that identified some of the bigger skills gaps, and some thoughts about how those seeking a career in these fields can better stand out from the crowd. Continue reading Thinking of a Cybersecurity Career? Read This→

Is there a difference between editing HTTP messages manually or with burp for example? (WebGoat HTTP intercept exercise "problem")

Posted on by

I am diving now into WebGoat, there’s this little exercise in the “general” tab calle d “http proxies” which asks you to use zap/burp to intercept and modify a request, this is what is being us asked.

I understood what is … Continue reading Is there a difference between editing HTTP messages manually or with burp for example? (WebGoat HTTP intercept exercise "problem")→