Access Control
Easy · IDOR

Another Student's Profile

SecureLearn is a student portal. You are logged in as student 1001. The application uses a numeric student identifier in the real profile URL. Determine whether the server verifies that the requested profile belongs to the current user.

Objective

Access another student's private profile and recover the flag from that account.

Target

SecureLearn

Usernamestudent1
Passwordstudent123
Launch target

Submit flag