web 2 Authentication Bypass By Abusing URL Based Controls [Portwigger Practitioner Series] Aug 23, 2024 Finding and Fixing a Simple IDOR on the Avatao Challenge Aug 16, 2024