Testing access controls with Burp Suite - Port Swigger
Summary: PortSwigger describes access control as the constraints on who or what can perform an action or reach a resource in an application, and calls broken access controls a commonly encountered and often critical vulnerability. The article states that misconfigured access controls can let an attacker reach resources they are not authorized to access, potentially obtaining sensitive data or discovering additional attack surface, and that Burp Suite provides a range of tools to test for these vulnerabilities.
Why it matters: Broken access control is described here as both commonly encountered and often critical, and the consequence it names is an attacker reaching resources they are not authorized to access and pulling out sensitive data.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026