webProeasy
TeamPulse — Broken Authorization in Team Invitation Roles
hackadvisor
Task: Free-tier workspace with client-side role restrictions on team invitations; Pro roles (analyst/manager) disabled in UI dropdown. Solution: bypass client-side restriction by sending POST to invitation API with premium role, register invited user, accept invitation, access Pro-only analytics dashboard containing the flag.
$ ls tags/ techniques/
nodejsexpressbroken_access_controlrbacteam_managementsubscription_bypasstier_bypasshoneypot_decoyrole_tamperingclient_side_restriction
parameter_tamperingsubscription_tier_bypassdecoy_flag_evasionclient_side_restriction_bypassrole_escalation_via_invitation
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Lab 401 — InsightPulse — Broken Authorization on AI Chat Agent API— hackadvisor
- [web][Pro]Lab 69 — TeamPulse — Reflected XSS in OAuth2 Error Callback— hackadvisor
- [web][Pro]CloudPulse — OAuth CSRF Account Takeover via Missing State Parameter— hackadvisor
- [web][Pro]Lab 233 — PulseAPI — Regex Auth Bypass via Query String Injection— hackadvisor
- [web][Pro]DesignPulse — Reflected XSS via SVG Badge Injection— hackadvisor