<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Burp-Suite on </title>
    <link>https://anashamidi.com/tags/burp-suite/</link>
    <description>Recent content in Burp-Suite on </description>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Thu, 07 Mar 2024 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://anashamidi.com/tags/burp-suite/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Click, Intercept, Hack: Checkmate on Access Control Vulnerability</title>
      <link>https://anashamidi.com/posts/click-intercept-hack-access-control/</link>
      <pubDate>Thu, 07 Mar 2024 00:00:00 +0000</pubDate>
      <guid>https://anashamidi.com/posts/click-intercept-hack-access-control/</guid>
      <description>&lt;p&gt;&lt;strong&gt;Good Day!&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;I hope you are doing well. Today, I am going to share a Broken Access Control (BAC) bug that I found a while ago in one of the HackerOne private programs. The website I was testing on is a popular chess platform, but I&amp;rsquo;ll refer to it as redacted.com :)&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;الحمدلله و الصلاة و السلام على سيدنا محمد&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Initially, I tested the platform using my main account instead of creating a new one. I spent two days testing, but I only received informative and &amp;ldquo;N/A&amp;rdquo; responses from the website security team.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
