Week 7: Additional Access Control Practice (Optional)

After you finish this week's lab, and if you have time or want to explore access control further, you can try the following optional exercises:

TryHackMe: Broken Access Control

• Hands-on practice with broken access control scenarios and privilege issues in a safe environment.
  • https://tryhackme.com/r/room/owaspbrokenaccesscontrol

PortSwigger Academy: Access Control

• Interactive web-security labs covering access control failures, authorisation flaws and privilege escalation in web applications.
  • https://portswigger.net/web-security/access-control

These are optional and for your own learning. They are useful if you want more practical experience beyond the Linux permissions and RBAC tasks in this session.