Access Control Web Lab (ACWL) is a web-based application designed for practice and in-depth understanding of access control vulnerabilities. This lab draws on the article "JavaScript Analysis: Identifying and Exploiting Web Weaknesses", which focuses on access control vulnerabilities in web applications.

To start testing and exploring the vulnerabilities discussed in the article, follow these steps:

git clone https://github.com/0xshdax/ACWL/
cd ACWL

pip install Flask

Start the application by running the provided Python script:

python3 app.py

By default, the application runs on http://localhost:5000. You can access it from your web browser to start exploring vulnerabilities.

You can log in using the following credentials:

Email: john@local.app
Password: passwd123 

Note: These credentials are for demo purposes.

This lab is based on concepts discussed in the article:

• JavaScript Analysis: Identifying and Exploiting Web Weaknesses

It’s recommended to read the article to gain insight into access control weaknesses before diving into the lab.

This project is licensed under the MIT License. See the LICENSE file for details.