> For the complete documentation index, see [llms.txt](https://books.spartan-cybersec.com/web/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://books.spartan-cybersec.com/web/access-control-vulnerabilities.md).

# Access control vulnerabilities

- [¿Control de Acceso?](https://books.spartan-cybersec.com/web/access-control-vulnerabilities/control-de-acceso.md)
- [Lab 1: Unprotected admin functionality](https://books.spartan-cybersec.com/web/access-control-vulnerabilities/lab-1-unprotected-admin-functionality.md): https://portswigger.net/web-security/access-control/lab-unprotected-admin-functionality
- [Lab 3: User role controlled by request parameter](https://books.spartan-cybersec.com/web/access-control-vulnerabilities/lab-3-user-role-controlled-by-request-parameter.md)