What can you infer and assume from looking at the above URL?

Questions
1. A user logging in to an application is redirected to the following URL:

https://wahh-app.com/MyAccount.php?uid=1241126841

a) What can you infer and assume from looking at the above URL?
b) How can you test whether the application is using the UID parameter to enforce access controls in an unsafe way?

2. Why is enforcing access control using the user source IP address a fundamentally flawed design?

3. Compare and contrast the common access control methods: MAC, DAC, RBAC, and ABAC.

4. You identified a possible SQL injection vulnerability in a login function. However, the following input fails to bypass
the login function:
‘ or 1=1—

The error message indicates that the — characters are being stripped by the application’s input filters. How can this be circumvented to bypass the login function?

Last Completed Projects