A01: Broken Access Control

Identify broken access control weaknesses in web applications by validating authorization.

1|Updated Apr 26, 2026

Search Tags:#security #owasp #web-security #access-control #privilege-escalation #idor #broken-access-control

One-click install

npx skills add https://github.com/ninjacoder88/masterpassword-open --skill a01-broken-access-control

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: A01: Broken Access Control
Source: https://github.com/ninjacoder88/masterpassword-open/tree/main/security/skills/owasp-broken-auth
Command: npx skills add https://github.com/ninjacoder88/masterpassword-open --skill a01-broken-access-control

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Broken access control lets attackers access data or actions beyond a user's authorization, exposing sensitive information and compromising operations.

Core Features & Use Cases

Defines common broken access control patterns (privilege escalation, IDOR, insecure direct object reference) and remediation strategies for web applications.
Provides risk and detection guidance for identifying and mitigating access-control weaknesses across software projects.
Use Case: A security team's review of a web app to verify that authenticated users cannot access other users' resources or perform privileged actions.