PWPP

TCM Security Practical Web Pentest Professional (PWPP)

Vuln ChainingEnglish
Exam overview

Practice session

During an advanced web pentest, you chain two vulnerabilities: first, you exploit an IDOR to access another user's profile data, then use exposed PII from that profile to bypass knowledge-based authentication on a password reset form. This demonstrates what advanced testing concept?

Loading your practice session…