https://anashamidi.com/tags/access-control/ Recent content in Access-Control on Hugo en Sat, 02 Aug 2025 00:00:00 +0000 https://anashamidi.com/posts/be-patient-keep-it-simple/ Sat, 02 Aug 2025 00:00:00 +0000 https://anashamidi.com/posts/be-patient-keep-it-simple/ <p>Good Day!</p> <p>I hope you are doing well. Long time not writing anything… right? Well I am back again with two finding I have discoverd recently at some private program at Hackerone. I hope at the end you will going to learn something new :)</p> <p>الحمدلله و الصلاة و السلام على سيدنا محمد</p> <p>اللهم انصر اخواننا في فلسطين</p> <p>In fact the bugs I am going to talk about not that much of complexity, the first bug is actually a simple IDOR with a High impact, but don&rsquo;t worry… I am not here to explain the IDOR. We are all know what the IDOR is and sick of it. I am here to tell you the secret -as I think- that leads me to find that High impact IDOR bug.</p> https://anashamidi.com/posts/click-intercept-hack-access-control/ Thu, 07 Mar 2024 00:00:00 +0000 https://anashamidi.com/posts/click-intercept-hack-access-control/ <p><strong>Good Day!</strong></p> <p>I hope you are doing well. Today, I am going to share a Broken Access Control (BAC) bug that I found a while ago in one of the HackerOne private programs. The website I was testing on is a popular chess platform, but I&rsquo;ll refer to it as redacted.com :)</p> <p><strong>الحمدلله و الصلاة و السلام على سيدنا محمد</strong></p> <p>Initially, I tested the platform using my main account instead of creating a new one. I spent two days testing, but I only received informative and &ldquo;N/A&rdquo; responses from the website security team.</p>