Broken Access Control — Forced Browsing and Privilege Escalation Audit

Hard GIAC GWEB cybersecurity drill: You are a Web Application Penetration Tester for RetailStream, an e-commerce platform with 1.2M users. During a