web · Easy · 125 points · 1 hour
StudentHub
Assess a university portal that handles student and staff profiles and academic records. Explore application behavior and access boundaries, then report any security issues you identify in a realistic, isolated practice environment.
Practice scenario
Assess a simulated university portal that manages student and staff profiles and academic records. Review how the application separates access, identify evidence of a possible authorization weakness, and document its impact.
Skills you will practise
- Map application roles and access boundaries
- Review object-level authorization behavior
- Document suspected IDOR and broken access control issues
Recommended background
Basic browser use and familiarity with web pages, links, and HTTP requests are helpful.
Estimated duration: 1 hour.
This public overview contains no flags, credentials, or solution steps. Practise only in the provided authorized environment.