{"id":19543,"date":"2025-05-26T15:46:15","date_gmt":"2025-05-26T12:16:15","guid":{"rendered":"https:\/\/liangroup.net\/blog\/?p=19543"},"modified":"2025-05-26T10:49:15","modified_gmt":"2025-05-26T07:19:15","slug":"burpsuite-for-pentester-autorize","status":"publish","type":"post","link":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/","title":{"rendered":"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite"},"content":{"rendered":"<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062f\u0627\u0631\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646\u060c \u062a\u0633\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0631\u06a9\u0627\u0646 \u0627\u0633\u0627\u0633\u06cc \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u06cc\u0645\u0646\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u0628\u0632\u0627\u0631 Burp Suite \u0633\u0627\u0644\u200c\u0647\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9\u06cc \u0627\u0632 \u067e\u06cc\u0634\u0631\u0648\u062a\u0631\u06cc\u0646 \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627 \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0648\u0632\u0647 \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0647\u0645\u0686\u0646\u0627\u0646 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0647\u06a9\u0631\u0647\u0627\u06cc \u06a9\u0644\u0627\u0647\u200c\u0633\u0641\u06cc\u062f (Ethical Hackers) \u0628\u0647\u200c\u0637\u0648\u0631 \u06af\u0633\u062a\u0631\u062f\u0647 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u062f\u0631 \u0645\u06cc\u0627\u0646 \u0627\u0641\u0632\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641\u06cc \u06a9\u0647 \u062f\u0631 \u062c\u0627\u0645\u0639\u0647\u200c\u06cc \u062a\u0633\u062a \u0627\u0645\u0646\u06cc\u062a \u0648\u0628 \u06a9\u0627\u0631\u0628\u0631\u062f \u062f\u0627\u0631\u0646\u062f\u060c Autorize \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0641\u0632\u0648\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0637\u0648\u0631 \u0648\u06cc\u0698\u0647 \u0645\u0648\u0631\u062f \u062a\u0648\u062c\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0627\u0641\u0632\u0648\u0646\u0647 \u0628\u0627 \u0627\u0631\u0627\u0626\u0647 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0642\u062f\u0631\u062a\u0645\u0646\u062f \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u060c \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a (Authentication) \u0648 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc (Authorization) \u0631\u0627 \u0633\u0627\u062f\u0647\u200c\u062a\u0631 \u0648 \u0645\u0624\u062b\u0631\u062a\u0631 \u0645\u06cc\u200c\u0633\u0627\u0632\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">Autorize \u0627\u0645\u06a9\u0627\u0646\u0627\u062a \u067e\u06cc\u0634\u0631\u0641\u062a\u0647\u200c\u0627\u06cc \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0645\u062a\u062e\u0635\u0635\u06cc\u0646 \u0627\u0645\u0646\u06cc\u062a \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u0628\u0647 \u0622\u0646\u200c\u0647\u0627 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u062f\u0642\u06cc\u0642\u200c\u062a\u0631\u06cc \u0631\u0648\u06cc \u0633\u06cc\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0636\u0639\u0641\u200c\u0647\u0627\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0645\u0627\u0646\u0646\u062f Broken Access Control\u060c IDOR \u0648 \u0633\u0627\u06cc\u0631 \u0633\u0646\u0627\u0631\u06cc\u0648\u0647\u0627\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u0637\u0648\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\"><em>Authorization<\/em> \u0634\u0627\u0645\u0644 \u0647\u0631 \u0631\u0648\u0634\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0622\u0646 \u0645\u062c\u0648\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u06cc\u0627 \u0639\u0645\u0644\u06cc\u0627\u062a \u062e\u0627\u0635 \u0631\u0627 \u0635\u0627\u062f\u0631 \u06cc\u0627 \u0644\u063a\u0648 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062f\u0631 \u0647\u0645\u06cc\u0646 \u062d\u0627\u0644\u060c <em>Authentication<\/em> \u0641\u0631\u0622\u06cc\u0646\u062f\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u06cc\u06a9 \u0641\u0631\u062f \u06cc\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0648\u06cc\u062a \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06a9\u0633\u06cc \u06a9\u0647 \u0627\u062f\u0639\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u062a\u0623\u06cc\u06cc\u062f \u0645\u06cc\u200c\u0646\u0645\u0627\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc\u200c\u0634\u062f\u0647 \u062a\u0648\u0633\u0637 Autorize<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">\u062f\u0631\u06a9 \u0639\u0645\u0644\u06a9\u0631\u062f<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0646\u0635\u0628 \u0648 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0646\u0645\u0627\u06cc\u0634 \u0639\u0645\u0644\u06cc \u0639\u0645\u0644\u06a9\u0631\u062f Autorize<\/span><\/li>\n<\/ul>\n<h2><strong>\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc\u200c\u0634\u062f\u0647 \u062a\u0648\u0633\u0637<\/strong><strong> Autorize<\/strong><\/h2>\n<p><span style=\"font-size: 10pt\">\u062f\u0631 \u0627\u0628\u062a\u062f\u0627\u060c <em>Autorize<\/em> \u0628\u0631 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 <em>Authorization<\/em> \u062a\u0645\u0631\u06a9\u0632 \u062f\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0647 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0686\u0646\u062f \u0646\u0648\u0639 \u0627\u0635\u0644\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u06a9\u0645\u06a9 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647:<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\uf0b7\u00a0 <strong>\u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0646\u0642\u0634<\/strong><strong> (RBAC) <\/strong><strong>\u0646\u0627\u06a9\u0627\u0641\u06cc<\/strong><strong>:<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\"><em>Autorize<\/em> \u0645\u0634\u06a9\u0644\u0627\u062a\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u0646\u0642\u0634\u200c\u0647\u0627 \u06cc\u0627 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0628\u0647\u200c\u062f\u0631\u0633\u062a\u06cc \u0627\u0639\u0645\u0627\u0644 \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u0648 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u0628\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627 \u06cc\u0627 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633\u06cc \u06a9\u0647 \u0646\u0628\u0627\u06cc\u062f \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\uf0b7\u00a0 <strong>\u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0634\u06a9\u0633\u062a\u0647<\/strong><strong> (Broken Access Controls):<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0645\u0648\u0627\u0631\u062f\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u06a9\u0646\u062a\u0631\u0644\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u0639\u0645\u0644 \u0646\u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0648 \u0645\u0646\u062c\u0631 \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u06cc\u0627 \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\uf0b7\u00a0 <strong>\u0627\u0631\u062c\u0627\u0639 \u0645\u0633\u062a\u0642\u06cc\u0645 \u0646\u0627\u0627\u06cc\u0645\u0646 \u0628\u0647 \u0627\u0634\u06cc\u0627\u0621<\/strong><strong> (Insecure Direct Object References &#8211; IDOR):<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0633\u0646\u0627\u0631\u06cc\u0648\u0647\u0627\u06cc\u06cc \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0648\u0631\u0648\u062f\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u06cc\u06af\u0631 \u06cc\u0627 \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u062d\u062f\u0648\u062f \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\uf0b7\u00a0 <strong>\u0645\u0631\u0648\u0631 \u0627\u062c\u0628\u0627\u0631\u06cc<\/strong><strong> (Forced Browsing):<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0645\u0648\u0642\u0639\u06cc\u062a\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 \u0628\u0647 URL\u0647\u0627\u06cc \u0645\u062d\u062f\u0648\u062f\u060c \u0627\u0632 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627 \u0639\u0628\u0648\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\uf0b7\u00a0 <strong>\u0645\u062c\u0648\u0632\u062f\u0647\u06cc \u0646\u0627\u06a9\u0627\u0641\u06cc<\/strong><strong> (Insufficient Authorization):<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0636\u0639\u0641 \u062f\u0631 \u0627\u0639\u0645\u0627\u0644 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0627\u0641\u0634\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 \u0622\u0646\u060c \u0627\u0646\u062c\u0627\u0645 \u0639\u0645\u0644\u06cc\u0627\u062a \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0645\u06a9\u0627\u0646\u200c\u067e\u0630\u06cc\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\uf0b7\u00a0 <strong>\u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0641\u0642\u06cc \u0648 \u0639\u0645\u0648\u062f\u06cc<\/strong><strong> (Horizontal and Vertical Privilege Escalation):<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0646\u0642\u0635\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u06a9\u0634\u0641 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0647\u0648\u06cc\u062a \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u06cc\u06af\u0631 \u0631\u0627 \u062c\u0639\u0644 \u06a9\u0631\u062f\u0647 \u06cc\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0628\u06cc\u0634\u062a\u0631\u06cc \u0628\u0647\u200c\u062f\u0633\u062a \u0622\u0648\u0631\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\uf0b7\u00a0 <strong>\u0646\u0642\u0635\u200c\u0647\u0627\u06cc \u0645\u0646\u0637\u0642 \u062a\u062c\u0627\u0631\u06cc<\/strong><strong> (Business Logic Flaws):<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\"><em>Autorize<\/em> \u062f\u0633\u062a\u200c\u06a9\u0627\u0631\u06cc \u062f\u0631 \u062c\u0631\u06cc\u0627\u0646 \u06a9\u0627\u0631\u06cc (workflow) \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u06cc\u0627 \u0646\u0634\u062a \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u062f\u0631\u06a9 \u0639\u0645\u0644\u06a9\u0631\u062f<\/strong><strong> Autorize<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0627\u06a9\u0646\u0648\u0646 \u0628\u06cc\u0627\u06cc\u06cc\u062f \u0646\u062d\u0648\u0647 \u0639\u0645\u0644\u06a9\u0631\u062f <em>Autorize<\/em> \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u0645. \u0641\u0631\u0636 \u06a9\u0646\u06cc\u062f \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647\u0654 \u0648\u0628 \u0627\u0632 <em>Role-Based Access Control<\/em> \u0648 <em>Cookie-Based Authentication<\/em> \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\"><strong>\u06a9\u0627\u0631\u0628\u0631 \u0639\u0627\u062f\u06cc<\/strong><strong> (Normal User):<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0628\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0631\u062f\u060c \u0627\u0645\u0627 \u0646\u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f \u06cc\u0627 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f (\u0641\u0642\u0637 \u062f\u0627\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc <em>read-only<\/em> \u0627\u0633\u062a).<\/span><\/li>\n<li><span style=\"font-size: 10pt\"><strong>\u06a9\u0627\u0631\u0628\u0631 \u0645\u062f\u06cc\u0631<\/strong> <strong>(Admin User):<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0628\u0647 \u062a\u0645\u0627\u0645 \u0628\u062e\u0634\u200c\u0647\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0631\u062f \u0648 \u062f\u0627\u0631\u0627\u06cc \u0645\u062c\u0648\u0632 \u06a9\u0627\u0645\u0644 \u0628\u0631\u0627\u06cc \u062e\u0648\u0627\u0646\u062f\u0646 \u0648 \u0646\u0648\u0634\u062a\u0646 (<em>full read\/write permissions<\/em>) \u0627\u0633\u062a.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: 10pt\">\u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f cookies \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0639\u0627\u062f\u06cc \u0631\u0627 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u06a9\u0631\u062f\u0647 \u0648 \u062f\u0631 Autorize \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f. \u0633\u067e\u0633\u060c \u0645\u062c\u062f\u062f\u0627\u064b \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062f\u06cc\u0631 (admin user) \u0648\u0627\u0631\u062f \u0634\u0648\u06cc\u062f\u060c \u0628\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0648\u06cc\u0698\u0647 \u0645\u062f\u06cc\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0647 \u0648 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647\u060c Autorize \u0686\u0647 \u06a9\u0627\u0631\u06cc \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f\u061f \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0647\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0631\u0627 \u0631\u0647\u200c\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c cookies \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0645\u062f\u06cc\u0631 \u0631\u0627 \u0628\u0627 cookies \u06a9\u0627\u0631\u0628\u0631 \u0639\u0627\u062f\u06cc \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u06a9\u0631\u062f\u0647 \u0648 \u0622\u0646 \u0631\u0627 \u0628\u0647 \u0633\u0631\u0648\u0631 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u0646\u0645\u0627\u06cc\u062f. \u0627\u06af\u0631 \u067e\u0627\u0633\u062e \u0633\u0631\u0648\u0631 \u0647\u0645\u0627\u0646 \u067e\u0627\u0633\u062e \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631 \u0628\u0627\u0634\u062f (\u0645\u0627\u0646\u0646\u062f \u06a9\u062f \u067e\u0627\u0633\u062e \u06f2\u06f0\u06f0 OK) \u0648 \u0647\u06cc\u0686 \u062e\u0637\u0627\u06cc\u06cc \u0638\u0627\u0647\u0631 \u0646\u0634\u0648\u062f\u060c Autorize \u0622\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0631\u0627 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 Red Bypass! \u0639\u0644\u0627\u0645\u062a\u200c\u06af\u0630\u0627\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062f\u0631 \u0645\u0642\u0627\u0628\u0644\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0628\u0647\u200c\u062f\u0631\u0633\u062a\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0628\u0647\u200c\u0635\u0648\u0631\u062a Green Enforced! \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0639\u0644\u0627\u0648\u0647\u200c\u0628\u0631\u0627\u06cc\u0646\u060c \u0628\u0631\u0627\u06cc \u0647\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u06a9\u0647 \u0627\u0632 \u0633\u0645\u062a \u06a9\u0627\u0631\u0628\u0631 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c Autorize \u062a\u0633\u062a \u062e\u0648\u062f\u06a9\u0627\u0631 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f. \u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0628\u0632\u0631\u06af \u06a9\u0647 \u062f\u0627\u0631\u0627\u06cc \u0628\u06cc\u0634 \u0627\u0632 \u06f3\u06f0 \u0635\u0641\u062d\u0647\u0654 \u067e\u0648\u06cc\u0627 \u0647\u0633\u062a\u0646\u062f\u060c \u0627\u06cc\u0646 \u0648\u06cc\u0698\u06af\u06cc \u0641\u0631\u0627\u06cc\u0646\u062f \u062a\u0633\u062a \u0631\u0627 \u0628\u0647\u200c\u0634\u062f\u062a \u0633\u0627\u062f\u0647\u200c\u062a\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0686\u0631\u0627 \u06a9\u0647 \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u062a\u0639\u062f\u0627\u062f \u0632\u06cc\u0627\u062f URL\u0647\u0627\u060c \u0628\u0631\u0631\u0633\u06cc \u062f\u0633\u062a\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0632\u0645\u0627\u0646\u200c\u0628\u0631 \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f\u061b \u0627\u0645\u0627 Autorize \u0628\u062e\u0634 \u0632\u06cc\u0627\u062f\u06cc \u0627\u0632 \u0628\u0627\u0631 \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0631 \u0639\u0647\u062f\u0647 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0634\u0627\u0628\u0647\u060c Autorize \u0645\u0634\u06a9\u0644\u0627\u062a \u0645\u0648\u062c\u0648\u062f \u062f\u0631 API endpoints \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0647 \u0647\u0645\u06cc\u0646 \u0631\u0648\u0634 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u0627\u06cc\u062f \u0631\u0648\u0634 authentication \u0628\u0631\u0627\u06cc \u0647\u0631 API \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u062f. \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644\u060c \u0627\u06af\u0631 \u06cc\u06a9 API \u0627\u0632 JWT token \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f authorization header \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u06cc\u062f \u062a\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0645\u062c\u0648\u0632 \u062f\u0631 API \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u0648\u0646\u062f.<\/span><\/p>\n<h2><strong>\u0646\u0635\u0628 \u0648 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc<\/strong><\/h2>\n<p><span style=\"font-size: 10pt\">\u0627\u0632 Bapp Store \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0641\u0632\u0648\u0646\u0647 \u0631\u0627 \u062f\u0627\u0646\u0644\u0648\u062f \u0648 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f. \u062f\u0631 \u0628\u062e\u0634 Extensions\u060c \u06af\u0632\u06cc\u0646\u0647 Bapp Store \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f. \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0639\u0628\u0627\u0631\u062a \u2018Authorize\u2019 \u0631\u0627 \u062c\u0633\u062a\u062c\u0648 \u06a9\u0646\u06cc\u062f \u06cc\u0627 \u0628\u0647\u200c\u0633\u0627\u062f\u06af\u06cc \u062f\u0631 \u0644\u06cc\u0633\u062a \u067e\u0627\u06cc\u06cc\u0646 \u0628\u0631\u0648\u06cc\u062f. \u0631\u0648\u06cc \u0622\u0646 \u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f \u0648 \u0628\u0647 \u0633\u0645\u062a \u0631\u0627\u0633\u062a \u0635\u0641\u062d\u0647 \u0627\u0633\u06a9\u0631\u0648\u0644 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0627\u06cc\u0646 \u0627\u0641\u0632\u0648\u0646\u0647 \u0628\u0627 Python \u062a\u0648\u0633\u0639\u0647 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u0634\u0627\u0647\u062f\u0647 \u062e\u0648\u0627\u0647\u06cc\u062f \u06a9\u0631\u062f \u06a9\u0647 \u067e\u06cc\u0634 \u0627\u0632 \u0627\u0633\u062a\u0641\u0627\u062f\u0647\u060c \u0646\u06cc\u0627\u0632 \u0627\u0633\u062a Jython \u0646\u0635\u0628 \u0634\u0648\u062f.<\/span><\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone  wp-image-19544\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1-9-300x216.png\" alt=\"\" width=\"563\" height=\"405\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1-9-300x216.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1-9-1024x737.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1-9-768x553.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1-9-1536x1106.png 1536w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1-9-150x108.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1-9.png 1538w\" sizes=\"(max-width: 563px) 100vw, 563px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u0644\u06cc\u0646\u06a9 \u0632\u06cc\u0631 \u0631\u0627 \u0645\u0631\u0648\u0631 \u06a9\u0631\u062f\u0647 \u0648 \u0641\u0627\u06cc\u0644 \u2018<a href=\"https:\/\/www.jython.org\/download.html\">Jython Standalone\u2019<\/a> \u0631\u0627 \u062f\u0627\u0646\u0644\u0648\u062f \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u062f\u0627\u0646\u0644\u0648\u062f\u060c \u0628\u0647 \u0645\u0633\u06cc\u0631 Setting &gt; Extension \u0628\u0631\u0648\u06cc\u062f \u0648 \u062f\u0631 \u0628\u062e\u0634 \u0633\u0645\u062a \u0631\u0627\u0633\u062a\u060c \u0632\u06cc\u0631 Python Environment\u060c \u0641\u0627\u06cc\u0644 Jython \u0631\u0627 \u0645\u0631\u0648\u0631 (browse) \u06a9\u0646\u06cc\u062f \u0648 \u0627\u0646\u062a\u062e\u0627\u0628 \u0646\u0645\u0627\u06cc\u06cc\u062f. \u0628\u0647 \u0627\u06cc\u0646 \u062a\u0631\u062a\u06cc\u0628 \u0645\u062d\u06cc\u0637 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Jython \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0645\u0648\u0641\u0642\u06cc\u062a\u200c\u0622\u0645\u06cc\u0632 \u062a\u0646\u0638\u06cc\u0645 \u0648 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/span><\/p>\n<p><img decoding=\"async\" class=\"alignnone  wp-image-19545\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/2-8-300x220.png\" alt=\"\" width=\"570\" height=\"418\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/2-8-300x220.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/2-8-1024x750.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/2-8-768x562.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/2-8-150x110.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/2-8.png 1456w\" sizes=\"(max-width: 570px) 100vw, 570px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0646\u0627\u0645\u0647 Burp \u0631\u0627 \u0645\u062c\u062f\u062f\u0627\u064b \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u06cc\u062f \u0648 \u0645\u0633\u06cc\u0631 \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0646\u0635\u0628 Authorize \u0627\u0632 BApp Store \u062f\u0646\u0628\u0627\u0644 \u0646\u0645\u0627\u06cc\u06cc\u062f. \u0645\u0634\u0627\u0647\u062f\u0647 \u062e\u0648\u0627\u0647\u06cc\u062f \u06a9\u0631\u062f \u06a9\u0647 \u062f\u06a9\u0645\u0647 install \u0641\u0639\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0631\u0648\u06cc \u0622\u0646 \u06a9\u0644\u06cc\u06a9 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0641\u0632\u0648\u0646\u0647 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><img decoding=\"async\" class=\"alignnone  wp-image-19546\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/3-9-288x300.png\" alt=\"\" width=\"578\" height=\"602\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/3-9-288x300.png 288w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/3-9-984x1024.png 984w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/3-9-768x799.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/3-9-150x156.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/3-9.png 1174w\" sizes=\"(max-width: 578px) 100vw, 578px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0646\u0635\u0628 \u0645\u0648\u0641\u0642\u06cc\u062a\u200c\u0622\u0645\u06cc\u0632\u060c \u062a\u0628 Authorize \u062f\u0631 \u0646\u0648\u0627\u0631 \u0628\u0627\u0644\u0627\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0638\u0627\u0647\u0631 \u062e\u0648\u0627\u0647\u062f \u0634\u062f.<\/span><\/p>\n<h2><strong>\u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc<\/strong><\/h2>\n<p><span style=\"font-size: 10pt\">\u062f\u0631 \u0628\u062e\u0634 Authorize \u062f\u0648 \u062a\u0628 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f: \u0627\u0648\u0644\u06cc\u0646 \u062a\u0628 Request\/Response Viewers \u0648 \u062a\u0628 \u062f\u0648\u0645 Configuration \u0627\u0633\u062a.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">Request\/Response Viewers<\/span><br \/>\n<span style=\"font-size: 10pt\">\u062a\u0628 Request\/Response \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0645\u0644 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0647\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0647 \u062f\u0631\u0648\u0646 Authorize \u0636\u0628\u0637 \u0648 \u0627\u0646\u062a\u062e\u0627\u0628 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0646\u0645\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f. \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062a\u063a\u06cc\u06cc\u0631\u200c\u06cc\u0627\u0641\u062a\u0647 \u062f\u0631 \u0628\u062e\u0634 Modified Request \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u061b \u062a\u0628 Original Request \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0635\u0644\u06cc \u0648 \u0628\u062f\u0648\u0646 \u062a\u063a\u06cc\u06cc\u0631 \u0631\u0627 \u0646\u0645\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f\u061b \u0648 \u0628\u062e\u0634 Unauthenticated Request \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19547\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/4-8-184x300.png\" alt=\"\" width=\"560\" height=\"913\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/4-8-184x300.png 184w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/4-8-629x1024.png 629w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/4-8-150x244.png 150w\" sizes=\"(max-width: 560px) 100vw, 560px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u062f\u0631 \u062a\u0628 Configuration \u0645\u0634\u0627\u0647\u062f\u0647 \u062e\u0648\u0627\u0647\u06cc\u062f \u06a9\u0631\u062f \u06a9\u0647 Autorize \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u062e\u0627\u0645\u0648\u0634 \u0627\u0633\u062a. \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0622\u0645\u0627\u062f\u0647 \u0636\u0628\u0637 (capture) \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627 \u0634\u062f\u06cc\u062f\u060c \u0627\u0628\u062a\u062f\u0627 \u0628\u0627\u06cc\u062f Autorize \u0631\u0627 \u0631\u0648\u0634\u0646 \u06a9\u0646\u06cc\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0646\u062d\u0648\u0647 \u0636\u0628\u0637 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627 \u0648 \u0648\u0636\u0639\u06cc\u062a \u06a9\u062f\u0647\u0627\u06cc \u067e\u0627\u0633\u062e \u0633\u0631\u0648\u0631 (server status code) \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0633\u062a\u0647 \u0628\u0647 \u0646\u06cc\u0627\u0632 \u0648 \u062a\u0631\u062c\u06cc\u062d\u0627\u062a \u062e\u0648\u062f \u0622\u0646\u0647\u0627 \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">Temporary Header and Token Replacement<\/span><br \/>\n<span style=\"font-size: 10pt\">\u062f\u0631 \u0628\u062e\u0634 Temporary header box\u060c \u0628\u0627\u06cc\u062f \u0645\u0642\u0627\u062f\u06cc\u0631 token \/ cookies \/ header \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0639\u0627\u062f\u06cc \u06a9\u0647 \u0645\u06cc\u200c\u062e\u0648\u0627\u0647\u06cc\u062f \u062f\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0648\u0627\u0642\u0639\u06cc \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u0634\u0648\u0646\u062f\u060c \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f\u061b \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646\u200c\u0645\u062b\u0627\u0644\u060c \u0627\u06af\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0627\u06cc \u0627\u0632 JWT token \u0628\u0631\u0627\u06cc \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0628\u0627\u06cc\u062f \u0645\u0642\u062f\u0627\u0631 \u0622\u0646 \u0631\u0627 \u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0634\u0645\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u06cc\u0646 \u0645\u0642\u062f\u0627\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a (auth value) \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062f\u0633\u062a\u06cc \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f \u06cc\u0627 \u0627\u0632 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u0632\u06cc\u0631 \u0628\u0631\u0627\u06cc \u0648\u0627\u06a9\u0634\u06cc (fetch) \u0622\u0646 \u0627\u0632 \u0622\u062e\u0631\u06cc\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0627\u06cc\u06cc\u062f:<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">\u0627\u06af\u0631 \u0645\u06cc\u200c\u062e\u0648\u0627\u0647\u06cc\u062f \u0645\u0642\u062f\u0627\u0631 Cookies header \u0631\u0627 \u0627\u0632 \u0622\u062e\u0631\u06cc\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f \u2192 \u0631\u0648\u06cc Fetch Cookies header \u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f.<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0627\u06af\u0631 \u0645\u06cc\u200c\u062e\u0648\u0627\u0647\u06cc\u062f \u0645\u0642\u062f\u0627\u0631 Authorization header \u0631\u0627 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f \u2192 \u0631\u0648\u06cc Fetch Authorization header \u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: 10pt\">\u0628\u0647\u200c\u0637\u0648\u0631 \u06a9\u0644\u06cc\u060c session cookies \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0632\u06cc\u0631 Cookies Header \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f \u0648 auth token \u062f\u0631 Authorization Header \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19548\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/5-9-297x300.png\" alt=\"\" width=\"576\" height=\"582\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/5-9-297x300.png 297w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/5-9-1013x1024.png 1013w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/5-9-768x776.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/5-9-96x96.png 96w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/5-9-150x152.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/5-9.png 1396w\" sizes=\"(max-width: 576px) 100vw, 576px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc<\/strong><strong> Enforcement Detector<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc session cookies\u060c \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 Authorize \u0645\u0634\u062e\u0635 \u06a9\u0646\u06cc\u062f \u06a9\u062f\u0627\u0645 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627 \u0628\u0627\u06cc\u062f intercept \u0634\u0648\u0646\u062f \u0648 \u0631\u0641\u062a\u0627\u0631 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0646\u06af\u0627\u0645 \u0645\u0648\u0627\u062c\u0647\u0647 \u0628\u0627 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u06cc\u0627 \u062f\u0627\u0631\u0627\u06cc \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0627\u06a9\u0627\u0641\u06cc \u0686\u06af\u0648\u0646\u0647 \u062a\u0639\u0631\u06cc\u0641 \u0634\u0648\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u0634\u0631\u0648\u0639 \u0628\u0627 Enforcement Detector\u060c \u0628\u0627\u06cc\u062f \u0645\u0634\u062e\u0635\u0647\u200c\u0627\u06cc \u0627\u0632 \u067e\u0627\u0633\u062e \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646 \u0622\u0646 \u0631\u0627 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u0646\u0634\u0627\u0646\u0647\u200c\u0627\u06cc \u0627\u0632 \u062a\u0644\u0627\u0634 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062d\u062f\u0648\u062f \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0639\u0645\u0644\u06cc \u06a9\u0647 \u0645\u062c\u0648\u0632 \u06a9\u0627\u0641\u06cc \u0646\u062f\u0627\u0631\u062f\u060c \u067e\u06cc\u0634\u200c\u0628\u06cc\u0646\u06cc \u06a9\u0631\u062f.<\/span><br \/>\n<span style=\"font-size: 10pt\">\u0628\u0631 \u0627\u0633\u0627\u0633 \u062a\u062c\u0631\u0628\u0647 \u0645\u0646\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06af\u0632\u06cc\u0646\u0647 \u201cBody (simple string): enforced message body contains\u201d \u0633\u0627\u062f\u0647\u200c\u062a\u0631\u06cc\u0646 \u0648 \u062f\u0631\u0639\u06cc\u0646\u200c\u062d\u0627\u0644 \u0645\u0624\u062b\u0631\u062a\u0631\u06cc\u0646 \u0631\u0648\u0634 \u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0627\u0633\u062a. \u0646\u0648\u0639 \u0648 \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u0646\u0627\u0633\u0628 \u0628\u0627 \u0646\u06cc\u0627\u0632\u0647\u0627\u06cc \u062e\u0627\u0635 \u062e\u0648\u062f \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f \u0648 \u0641\u0631\u0627\u0645\u0648\u0634 \u0646\u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0631\u0648\u06cc \u062f\u06a9\u0645\u0647 \u201cAdd filter\u201d \u06a9\u0644\u06cc\u06a9 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19549\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/6-8-300x195.png\" alt=\"\" width=\"578\" height=\"376\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/6-8-300x195.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/6-8-1024x665.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/6-8-768x499.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/6-8-150x97.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/6-8.png 1204w\" sizes=\"(max-width: 578px) 100vw, 578px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0686\u0646\u062f\u06cc\u0646 \u0641\u06cc\u0644\u062a\u0631<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0647\u0645\u0686\u0646\u06cc\u0646 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0628\u062f\u0627\u0646\u06cc\u062f \u06a9\u0647 \u0647\u0646\u06af\u0627\u0645 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0686\u0646\u062f\u06cc\u0646 \u0641\u06cc\u0644\u062a\u0631\u060c \u0645\u0642\u0627\u06cc\u0633\u0647 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062e\u0648\u062f\u06a9\u0627\u0631 \u0631\u0648\u06cc \u201cAnd\u201d \u062a\u0646\u0638\u06cc\u0645 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646\u060c \u0627\u06af\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u067e\u06cc\u0627\u0645\u200c\u0647\u0627\u06cc \u062e\u0637\u0627\u06cc \u0645\u062a\u0641\u0627\u0648\u062a\u06cc \u062a\u0648\u0644\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u2014 \u0645\u062b\u0644\u0627\u064b \u06cc\u06a9 \u067e\u06cc\u0627\u0645 \u0628\u0631\u0627\u06cc \u062a\u0644\u0627\u0634 \u062c\u0647\u062a \u062e\u0648\u0627\u0646\u062f\u0646 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0648 \u067e\u06cc\u0627\u0645 \u062f\u06cc\u06af\u0631 \u0628\u0631\u0627\u06cc \u062a\u0644\u0627\u0634 \u062c\u0647\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u2014 \u0628\u0627\u06cc\u062f \u0628\u0631\u0627\u06cc \u0647\u0631 \u0633\u0646\u0627\u0631\u06cc\u0648 \u06cc\u06a9 \u0641\u06cc\u0644\u062a\u0631 \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0631\u062f\u0647 \u0648 \u0633\u067e\u0633 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0631\u0627 \u0627\u0632 \u201cAnd\u201d \u0628\u0647 \u201cOr\u201d \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc Unauthenticated Detector<\/span><br \/>\n<span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc Unauthenticated Detector \u0646\u06cc\u0632 \u0647\u0645\u0627\u0646 \u0631\u0648\u06cc\u0647 \u0648 \u0645\u0631\u0627\u062d\u0644 \u0645\u0634\u0627\u0628\u0647 \u0631\u0627 \u062f\u0646\u0628\u0627\u0644 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19550\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/7-7-300x120.png\" alt=\"\" width=\"588\" height=\"235\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/7-7-300x120.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/7-7-1024x410.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/7-7-768x308.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/7-7-150x60.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/7-7.png 1427w\" sizes=\"(max-width: 588px) 100vw, 588px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0641\u06cc\u0644\u062a\u0631 \u0631\u0647\u06af\u06cc\u0631\u06cc<\/strong><strong> (Interception Filter)<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0641\u06cc\u0644\u062a\u0631 Interception \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0641\u0642\u0637 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u0631\u0647\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0645\u062d\u062f\u0648\u062f\u0647 \u062a\u0639\u0631\u06cc\u0641\u200c\u0634\u062f\u0647 (Scope items only) \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f\u060c \u0628\u062f\u0648\u0646 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0645\u062d\u062a\u0648\u0627\u06cc \u0622\u0646\u0647\u0627. \u0627\u0632 \u0645\u06cc\u0627\u0646 \u0627\u06cc\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u060c \u0628\u0647\u200c\u0637\u0648\u0631 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 spider \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 URL\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0634\u0627\u0645\u0644 \u067e\u0633\u0648\u0646\u062f\u0647\u0627\u06cc \u062a\u0635\u0648\u06cc\u0631\u06cc \u0647\u0633\u062a\u0646\u062f\u060c \u0646\u0627\u062f\u06cc\u062f\u0647 \u06af\u0631\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/span><br \/>\n<span style=\"font-size: 10pt\">\u0634\u0645\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0633\u062a\u0647 \u0628\u0647 \u062a\u0631\u062c\u06cc\u062d\u0627\u062a \u062e\u0648\u062f \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627 \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0631\u062f\u0647 \u0648 \u067e\u0633 \u0627\u0632 \u062a\u0639\u06cc\u06cc\u0646 type \u0645\u0646\u0627\u0633\u0628\u060c \u0631\u0648\u06cc \u062f\u06a9\u0645\u0647 \u201cAdd filter\u201d \u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19551\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/8-5-300x152.png\" alt=\"\" width=\"594\" height=\"301\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/8-5-300x152.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/8-5-1024x519.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/8-5-768x389.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/8-5-150x76.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/8-5.png 1439w\" sizes=\"(max-width: 594px) 100vw, 594px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0642\u0627\u0628\u0644\u06cc\u062a<\/strong><strong> Match\/Replace<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">\u0627\u0641\u0632\u0648\u0646 \u0628\u0631 \u0627\u06cc\u0646\u060c Autorize \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u06cc \u0628\u0647 \u0646\u0627\u0645 Match\/Replace \u0627\u0633\u062a. \u0627\u0632 \u0627\u06cc\u0646 \u0648\u06cc\u0698\u06af\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0632\u0645\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u06cc\u062f \u06cc\u06a9 \u0647\u062f\u0631 \u062e\u0627\u0635 \u06cc\u0627 \u06cc\u06a9 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u062f\u0631 \u0628\u062f\u0646\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a (body parameter) \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u06cc\u062f.<\/span><br \/>\n<span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u0627\u06af\u0631 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u2018u.name\u2019 \u062f\u0631 \u0628\u062f\u0646\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0646\u06cc\u0627\u0632 \u0628\u0647 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u0634\u062f\u0646 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u0627\u062f\u0645\u06cc\u0646 (\u0645\u0627\u0646\u0646\u062f \u2018a.name\u2019) \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f Autorize \u0631\u0627 \u0637\u0648\u0631\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u062a\u063a\u06cc\u06cc\u0631 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062e\u0648\u062f\u06a9\u0627\u0631 \u0627\u0646\u062c\u0627\u0645 \u0634\u0648\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u062f\u0631 \u0627\u06cc\u0646 \u0628\u062e\u0634\u060c \u0634\u0645\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0641\u0632\u0648\u062f\u0646 \u0645\u0642\u0627\u062f\u06cc\u0631 \u0645\u0648\u0631\u062f\u0646\u0638\u0631\u060c Autorize \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646\u06cc\u200c\u0647\u0627 \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19552\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/9-7-300x153.png\" alt=\"\" width=\"602\" height=\"307\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/9-7-300x153.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/9-7-1024x524.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/9-7-768x393.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/9-7-150x77.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/9-7.png 1416w\" sizes=\"(max-width: 602px) 100vw, 602px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0633\u0641\u0627\u0631\u0634\u06cc\u200c\u0633\u0627\u0632\u06cc \u0641\u06cc\u0644\u062a\u0631\u0647\u0627 \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u067e\u0627\u0633\u062e\u200c\u0647\u0627<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0646\u0648\u0639 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u06a9\u0647 \u0645\u06cc\u200c\u062e\u0648\u0627\u0647\u06cc\u062f \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0646\u0648\u0627\u0631 Table Filter \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">bypassed!: \u0627\u06cc\u0646 endpoint \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0646\u0633\u0628\u062a \u0628\u0647 IDOR \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0627\u0634\u062f.<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Is enforced!: \u0628\u0647\u200c\u0646\u0638\u0631 \u0645\u06cc\u200c\u0631\u0633\u062f \u0627\u06cc\u0646 endpoint \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u062c\u062f\u062f \u062f\u0627\u0631\u062f.<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Enforcing!: \u0627\u06cc\u0646 endpoint \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0648\u0627\u0636\u062d \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 IDOR \u0645\u062d\u0627\u0641\u0638\u062a \u0645\u06cc\u200c\u0634\u0648\u062f.<\/span><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19553\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/10-7-300x85.png\" alt=\"\" width=\"611\" height=\"173\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/10-7-300x85.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/10-7-1024x291.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/10-7-768x218.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/10-7-150x43.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/10-7.png 1414w\" sizes=\"(max-width: 611px) 100vw, 611px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u062f\u0631 \u0646\u0647\u0627\u06cc\u062a\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0641\u06cc\u0644\u062a\u0631\u0634\u062f\u0647 \u0631\u0627 \u0628\u0631\u0627\u06cc \u062a\u062d\u0644\u06cc\u0644\u200c\u0647\u0627\u06cc \u0628\u06cc\u0634\u062a\u0631 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062a\u0628 Save\/Restore \u0630\u062e\u06cc\u0631\u0647 \u0648 \u0635\u0627\u062f\u0631 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<h2>\u0646\u0645\u0627\u06cc\u0634 \u0639\u0645\u0644\u06cc \u0639\u0645\u0644\u06a9\u0631\u062f Autorize<\/h2>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u062f\u0631\u06a9 \u0628\u0647\u062a\u0631\u060c \u06cc\u06a9 \u0646\u0645\u0627\u06cc\u0634 \u0633\u0631\u06cc\u0639 \u0648 \u0639\u0645\u0644\u06cc \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u06cc\u0645. \u062f\u0631 \u0627\u06cc\u0646 \u062a\u0645\u0631\u06cc\u0646\u060c \u0627\u0632 \u06cc\u06a9 PortSwigger lab \u0627\u0632 \u067e\u06cc\u0634\u200c\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc\u200c\u0634\u062f\u0647 \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 &#8220;Method-based access control can be circumvented&#8221; \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645. \u0631\u0648\u06cc &#8220;access the lab&#8221; \u06a9\u0644\u06cc\u06a9 \u06a9\u0631\u062f\u0647 \u0648 \u0648\u0627\u0631\u062f \u0628\u0631\u0646\u0627\u0645\u0647 \u0634\u0648\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0627\u06cc\u0646 \u0622\u0632\u0645\u0627\u06cc\u0634\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Broken Access Control \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u062f\u0648 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u0646\u0642\u0634\u200c\u0647\u0627\u06cc \u0645\u062a\u0641\u0627\u0648\u062a (\u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627\u0644\u0627 \u0648 \u067e\u0627\u06cc\u06cc\u0646) \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f. \u0647\u0645\u06cc\u0646 \u0645\u0641\u0647\u0648\u0645 \u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0634\u0627\u0628\u0647 \u0646\u06cc\u0632 \u0628\u0647 \u06a9\u0627\u0631 \u0628\u0631\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19554\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/11-6-300x214.png\" alt=\"\" width=\"631\" height=\"450\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/11-6-300x214.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/11-6-1024x732.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/11-6-768x549.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/11-6-1536x1098.png 1536w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/11-6-150x107.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/11-6.png 1613w\" sizes=\"(max-width: 631px) 100vw, 631px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u0627\u0628\u062a\u062f\u0627 \u0628\u0627\u06cc\u062f \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u0627\u06cc\u06cc\u0646 (\u06a9\u0627\u0631\u0628\u0631 \u0639\u0627\u062f\u06cc) \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u06cc\u0645. \u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0627\u0632 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0639\u0627\u062f\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/span><\/p>\n<p><span style=\"font-size: 10pt\">Wiener:peter<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0633\u067e\u0633 \u0628\u0627 \u0648\u0631\u0648\u062f \u0628\u0647 \u0628\u0631\u0646\u0627\u0645\u0647\u060c session cookie \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19555\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/12-4-300x232.png\" alt=\"\" width=\"626\" height=\"484\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/12-4-300x232.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/12-4-1024x791.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/12-4-768x593.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/12-4-150x116.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/12-4.png 1163w\" sizes=\"(max-width: 626px) 100vw, 626px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u062c\u0632\u0626\u06cc\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f:<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0627\u0628\u062a\u062f\u0627 \u0628\u0627\u06cc\u062f \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u0627\u06cc\u06cc\u0646 (\u06a9\u0627\u0631\u0628\u0631 \u0639\u0627\u062f\u06cc) \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u06cc\u0645. \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648\u060c \u0627\u0632 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/span><\/p>\n<p><span style=\"font-size: 10pt\">Wiener : peter<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0648\u0631\u0648\u062f \u0628\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0633\u0627\u0628\u060c session cookie \u0627\u06cc\u062c\u0627\u062f\u0634\u062f\u0647 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0645\u0631\u0627\u062d\u0644 \u0628\u0639\u062f\u06cc \u0630\u062e\u06cc\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19556\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/13-3-300x212.png\" alt=\"\" width=\"611\" height=\"432\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/13-3-300x212.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/13-3-1024x722.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/13-3-150x106.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/13-3.png 1146w\" sizes=\"(max-width: 611px) 100vw, 611px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u062f\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0648\u0631\u0648\u062f\u060c session cookie \u0645\u0634\u0627\u0628\u0647 \u0646\u0645\u0648\u0646\u0647 \u0632\u06cc\u0631 \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u062e\u0648\u0627\u0647\u06cc\u062f \u06a9\u0631\u062f. \u0627\u06a9\u0646\u0648\u0646 \u0627\u06cc\u0646 cookie header \u0631\u0627 \u06a9\u067e\u06cc \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19557\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/14-3-300x223.png\" alt=\"\" width=\"599\" height=\"445\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/14-3-300x223.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/14-3-1024x762.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/14-3-768x572.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/14-3-150x112.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/14-3.png 1135w\" sizes=\"(max-width: 599px) 100vw, 599px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u0645\u0642\u062f\u0627\u0631 cookie header \u06a9\u067e\u06cc\u200c\u0634\u062f\u0647 \u0631\u0627 \u0645\u0637\u0627\u0628\u0642 \u062a\u0635\u0648\u06cc\u0631 \u0632\u06cc\u0631 \u062f\u0631 \u062a\u0628 Autorize \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19558\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/15-3-300x210.png\" alt=\"\" width=\"599\" height=\"419\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/15-3-300x210.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/15-3-768x537.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/15-3-150x105.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/15-3.png 910w\" sizes=\"(max-width: 599px) 100vw, 599px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u0648 \u06af\u0632\u06cc\u0646\u0647 Autorize \u0631\u0627 \u062f\u0631 \u062d\u0627\u0644\u062a \u0641\u0639\u0627\u0644 \u0646\u06af\u0647 \u062f\u0627\u0631\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19559\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/16-3-300x204.png\" alt=\"\" width=\"599\" height=\"407\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/16-3-300x204.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/16-3-768x523.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/16-3-150x102.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/16-3.png 944w\" sizes=\"(max-width: 599px) 100vw, 599px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0627\u0645\u06a9\u0627\u0646 auth bypass\u060c \u0627\u06a9\u0646\u0648\u0646 \u0628\u0627\u06cc\u062f \u0628\u0627 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627\u0644\u0627 (admin user) \u0648\u0627\u0631\u062f \u0634\u0648\u06cc\u0645. \u062f\u0648\u0628\u0627\u0631\u0647 \u0628\u0647 \u0635\u0641\u062d\u0647 \u0648\u0631\u0648\u062f \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<p><span style=\"font-size: 10pt\">Administrator : admin<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19560\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/17-3-300x247.png\" alt=\"\" width=\"606\" height=\"499\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/17-3-300x247.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/17-3-768x632.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/17-3-150x123.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/17-3.png 1024w\" sizes=\"(max-width: 606px) 100vw, 606px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0648\u0631\u0648\u062f \u0645\u0648\u0641\u0642 \u0628\u0627 \u062d\u0633\u0627\u0628 admin \u0648 \u0645\u0631\u0648\u0631 \u062a\u0645\u0627\u0645 URL\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0645\u062e\u0635\u0648\u0635 \u0645\u062f\u06cc\u0631 \u0647\u0633\u062a\u0646\u062f\u060c \u062f\u0631 \u062a\u0628 Autorize \u0686\u0646\u062f \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0631\u062c\u0633\u062a\u0647\u200c\u0634\u062f\u0647 \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u062e\u0648\u0627\u0647\u06cc\u062f \u06a9\u0631\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u062a\u0641\u0633\u06cc\u0631 \u0646\u062a\u0627\u06cc\u062c \u0648 \u062f\u0631\u06a9 \u0648\u0636\u0639\u06cc\u062a\u200c\u0647\u0627\u06cc Authorization<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">Authz. Status \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u06a9\u062f\u0627\u0645 endpoint\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 wiener (\u06a9\u0627\u0631\u0628\u0631 \u0639\u0627\u062f\u06cc) \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0633\u062a\u0646\u062f.<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Unauth. Status \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u0633\u062a\u061b \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0627\u0644\u062a\u060c cookie \u0648 \u062a\u0645\u0627\u0645 authorization headers \u062d\u0630\u0641 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u06cc\u0646 \u0648\u06cc\u0698\u06af\u06cc \u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0628\u0627 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644\u200c\u06a9\u0631\u062f\u0646 \u06af\u0632\u06cc\u0646\u0647 Check unauthenticated \u062f\u0631 \u062a\u0628 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a Autorize \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: 10pt\">\u0648\u0636\u0639\u06cc\u062a\u200c\u0647\u0627\u06cc \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647\u200c\u0634\u062f\u0647:<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">\u0642\u0631\u0645\u0632 [Bypassed!]: \u0627\u06cc\u0646 endpoint \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0647 \u0645\u0634\u06a9\u0644\u0627\u062a access control \u06cc\u0627 IDOR \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0627\u0634\u062f.<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0646\u0627\u0631\u0646\u062c\u06cc [Is enforced!]: \u0628\u0647\u200c\u0646\u0638\u0631 \u0645\u06cc\u200c\u0631\u0633\u062f \u0627\u06cc\u0646 endpoint \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0628\u0627 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646\u06cc \u062f\u0633\u062a\u06cc \u0645\u0642\u062f\u0627\u0631 cookie \u0622\u0646 \u0631\u0627 \u0645\u062c\u062f\u062f\u0627\u064b \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0633\u0628\u0632 [Enforced!]: \u0627\u06cc\u0646 endpoint \u0628\u0647\u200c\u0637\u0648\u0631 \u0648\u0627\u0636\u062d \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0645\u0634\u06a9\u0644\u0627\u062a access control \u06cc\u0627 IDOR \u0645\u062d\u0627\u0641\u0638\u062a \u0645\u06cc\u200c\u0634\u0648\u062f.<\/span><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19561\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/18-3-300x78.png\" alt=\"\" width=\"585\" height=\"152\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/18-3-300x78.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/18-3-1024x268.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/18-3-768x201.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/18-3-1536x401.png 1536w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/18-3-150x39.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/18-3.png 1726w\" sizes=\"(max-width: 585px) 100vw, 585px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u0647\u0645\u0627\u0646\u200c\u0637\u0648\u0631 \u06a9\u0647 \u062f\u0631 \u062a\u0635\u0648\u06cc\u0631 \u0628\u0627\u0644\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0634\u0645\u0627\u0631\u0647 \u06f1\u060c \u06f2\u060c \u06f6 \u0648 \u06f7 \u062f\u0686\u0627\u0631 \u0645\u0634\u06a9\u0644 Broken Access Control \u0647\u0633\u062a\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u062a\u0648\u062c\u0647 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u06a9\u0647 \u0646\u062a\u0627\u06cc\u062c Autorize \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u06a9\u0648\u0631\u06a9\u0648\u0631\u0627\u0646\u0647 \u062f\u0646\u0628\u0627\u0644 \u0646\u06a9\u0646\u06cc\u062f. \u0647\u0627\u06cc\u0644\u0627\u06cc\u062a \u0642\u0631\u0645\u0632 \u0628\u0647 \u0645\u0639\u0646\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06cc\u0627 \u0639\u0628\u0648\u0631 \u0627\u0632 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0631 \u0647\u0645\u0647 endpoint\u0647\u0627 \u0646\u06cc\u0633\u062a \u0648 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0645\u0648\u0627\u0631\u062f \u0645\u062b\u0628\u062a \u06a9\u0627\u0630\u0628 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u061b \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646\u060c \u062d\u062a\u0645\u0627\u064b \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u062a\u06a9\u0645\u06cc\u0644\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u062e\u06cc \u0633\u0646\u0627\u0631\u06cc\u0648\u0647\u0627\u06cc \u0645\u0645\u06a9\u0646 \u062f\u06cc\u06af\u0631:<\/span><br \/>\n<span style=\"font-size: 10pt\">\u0641\u0631\u0636 \u06a9\u0646\u06cc\u062f \u062f\u0631 \u062d\u0627\u0644 \u0628\u0631\u0631\u0633\u06cc \u0645\u0634\u06a9\u0644\u0627\u062a \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u06cc\u0646 \u062f\u0648 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0631\u0627\u0628\u0631 \u0647\u0633\u062a\u06cc\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0627\u0644\u062a\u060c \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0648\u0636\u0639\u06cc\u062a Authz. Status \u0645\u0642\u062f\u0627\u0631 Bypassed! \u0648 \u0648\u0636\u0639\u06cc\u062a Unauth. Status \u0645\u0642\u062f\u0627\u0631 Enforced! \u0631\u0627 \u0646\u0634\u0627\u0646 \u062f\u0647\u062f. \u0627\u06cc\u0646 \u0628\u062f\u0627\u0646 \u0645\u0639\u0646\u0627\u0633\u062a \u06a9\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0622\u0646 endpoint \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u062f\u0648\u0645 \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u0647\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc\u0644\u0627\u06cc\u062a\u200c\u0634\u062f\u0647\u060c \u062f\u0631 \u0633\u0645\u062a \u0631\u0627\u0633\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062f\u0642\u06cc\u0642 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627 \u0648 \u067e\u0627\u0633\u062e\u200c\u0647\u0627\u06cc \u0627\u0635\u0644\u06cc\u060c \u062a\u063a\u06cc\u06cc\u0631 \u06cc\u0627\u0641\u062a\u0647 \u0648 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-19562\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/19-3-149x300.png\" alt=\"\" width=\"542\" height=\"1091\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/19-3-149x300.png 149w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/19-3-508x1024.png 508w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/19-3-150x303.png 150w\" sizes=\"(max-width: 542px) 100vw, 542px\" \/><\/p>\n<h2>\u0646\u062a\u06cc\u062c\u0647\u200c\u06af\u06cc\u0631\u06cc<\/h2>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u062c\u0627\u0645\u0639 \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u0627\u0641\u0632\u0648\u0646\u0647 Autorize Burp \u0627\u0628\u0632\u0627\u0631\u06cc \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a. \u0628\u0627 \u062e\u0648\u062f\u06a9\u0627\u0631\u0633\u0627\u0632\u06cc \u0641\u0631\u0627\u06cc\u0646\u062f \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u0627\u0645\u06a9\u0627\u0646 \u062a\u0633\u062a \u0628\u062e\u0634\u200c\u0647\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u0634\u062f\u0647\u060c \u0627\u06cc\u0646 \u0627\u0641\u0632\u0648\u0646\u0647 \u06a9\u0627\u0631\u0627\u06cc\u06cc \u0648 \u0627\u062b\u0631\u0628\u062e\u0634\u06cc \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0628\u0647\u200c\u0637\u0648\u0631 \u0642\u0627\u0628\u0644 \u062a\u0648\u062c\u0647\u06cc \u0627\u0641\u0632\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f. \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0622\u0632\u0645\u0648\u0646\u200c\u0647\u0627\u06cc \u06a9\u0627\u0645\u0644 \u0648 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u06a9\u0647 \u062a\u0646\u0647\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u200c\u0634\u062f\u0647 \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0633\u062a\u0646\u062f\u060c \u06a9\u0627\u0645\u0644\u0627\u064b \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062f\u0627\u0631\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646\u060c \u062a\u0633\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0631\u06a9\u0627\u0646 \u0627\u0633\u0627\u0633\u06cc \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u06cc\u0645\u0646\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u0628\u0632\u0627\u0631 Burp Suite \u0633\u0627\u0644\u200c\u0647\u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9\u06cc \u0627\u0632 \u067e\u06cc\u0634\u0631\u0648\u062a\u0631\u06cc\u0646 \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627 \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0648\u0632\u0647 \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0647\u0645\u0686\u0646\u0627\u0646 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0647\u06a9\u0631\u0647\u0627\u06cc \u06a9\u0644\u0627\u0647\u200c\u0633\u0641\u06cc\u062f (Ethical Hackers) \u0628\u0647\u200c\u0637\u0648\u0631 \u06af\u0633\u062a\u0631\u062f\u0647 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f. \u062f\u0631 \u0645\u06cc\u0627\u0646 \u0627\u0641\u0632\u0648\u0646\u0647\u200c\u0647\u0627\u06cc &hellip;<\/p>\n","protected":false},"author":14,"featured_media":19563,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[258,2,275,349],"tags":[],"class_list":["post-19543","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teaching","category-pentest","category-penetration-test-article","category-slides"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.5 (Yoast SEO v27.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite - \u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646<\/title>\n<meta name=\"description\" content=\"\u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062f\u0627\u0631\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646\u060c \u062a\u0633\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0631\u06a9\u0627\u0646 \u0627\u0633\u0627\u0633\u06cc \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u06cc\u0645\u0646\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/\" \/>\n<meta property=\"og:locale\" content=\"fa_IR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite\" \/>\n<meta property=\"og:description\" content=\"\u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062f\u0627\u0631\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646\u060c \u062a\u0633\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0631\u06a9\u0627\u0646 \u0627\u0633\u0627\u0633\u06cc \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u06cc\u0645\u0646\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/\" \/>\n<meta property=\"og:site_name\" content=\"\u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-26T12:16:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1731342183597.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1072\" \/>\n\t<meta property=\"og:image:height\" content=\"603\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@liansecurity\" \/>\n<meta name=\"twitter:site\" content=\"@liansecurity\" \/>\n<meta name=\"twitter:label1\" content=\"\u0646\u0648\u0634\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u062f\u0633\u062a\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u0632\u0645\u0627\u0646 \u062a\u0642\u0631\u06cc\u0628\u06cc \u0628\u0631\u0627\u06cc \u062e\u0648\u0627\u0646\u062f\u0646\" \/>\n\t<meta name=\"twitter:data2\" content=\"16 \u062f\u0642\u06cc\u0642\u0647\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/\"},\"author\":{\"name\":\"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#\\\/schema\\\/person\\\/e328f67a35a843fd3accc4666b5eab0a\"},\"headline\":\"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite\",\"datePublished\":\"2025-05-26T12:16:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/\"},\"wordCount\":316,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/1731342183597.jpg\",\"articleSection\":[\"\u0622\u0645\u0648\u0632\u0634\u200c\u0647\u0627\u06cc \u0644\u06cc\u0627\u0646\",\"\u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u0648 \u0627\u0645\u0646\u06cc\u062a\",\"\u0645\u0642\u0627\u0644\u0627\u062a \u062a\u0633\u062a \u0646\u0641\u0648\u0630\",\"\u06cc\u06cc\u06cc\u06cc \u0627\u0633\u0644\u0627\u06cc\u062f\"],\"inLanguage\":\"fa-IR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/\",\"url\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/\",\"name\":\"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite - \u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/1731342183597.jpg\",\"datePublished\":\"2025-05-26T12:16:15+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#\\\/schema\\\/person\\\/e328f67a35a843fd3accc4666b5eab0a\"},\"description\":\"\u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062f\u0627\u0631\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646\u060c \u062a\u0633\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0631\u06a9\u0627\u0646 \u0627\u0633\u0627\u0633\u06cc \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u06cc\u0645\u0646\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/#breadcrumb\"},\"inLanguage\":\"fa-IR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fa-IR\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/#primaryimage\",\"url\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/1731342183597.jpg\",\"contentUrl\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/1731342183597.jpg\",\"width\":1072,\"height\":603,\"caption\":\"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/burpsuite-for-pentester-autorize\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u062e\u0627\u0646\u0647\",\"item\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/\",\"name\":\"\u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646\",\"description\":\"\u0622\u062e\u0631\u06cc\u0646 \u0627\u062e\u0628\u0627\u0631\u060c\u0645\u0642\u0627\u0644\u0627\u062a \u0648 \u0622\u0645\u0648\u0632\u0634\u200c\u0647\u0627\u06cc \u062d\u0648\u0632\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fa-IR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#\\\/schema\\\/person\\\/e328f67a35a843fd3accc4666b5eab0a\",\"name\":\"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc\",\"sameAs\":[\"https:\\\/\\\/liangroup.net\"],\"url\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/author\\\/s-teymouri\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite - \u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646","description":"\u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062f\u0627\u0631\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646\u060c \u062a\u0633\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0631\u06a9\u0627\u0646 \u0627\u0633\u0627\u0633\u06cc \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u06cc\u0645\u0646\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/","og_locale":"fa_IR","og_type":"article","og_title":"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite","og_description":"\u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062f\u0627\u0631\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646\u060c \u062a\u0633\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0631\u06a9\u0627\u0646 \u0627\u0633\u0627\u0633\u06cc \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u06cc\u0645\u0646\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.","og_url":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/","og_site_name":"\u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646","article_published_time":"2025-05-26T12:16:15+00:00","og_image":[{"width":1072,"height":603,"url":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1731342183597.jpg","type":"image\/jpeg"}],"author":"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc","twitter_card":"summary_large_image","twitter_creator":"@liansecurity","twitter_site":"@liansecurity","twitter_misc":{"\u0646\u0648\u0634\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u062f\u0633\u062a":"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc","\u0632\u0645\u0627\u0646 \u062a\u0642\u0631\u06cc\u0628\u06cc \u0628\u0631\u0627\u06cc \u062e\u0648\u0627\u0646\u062f\u0646":"16 \u062f\u0642\u06cc\u0642\u0647"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/#article","isPartOf":{"@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/"},"author":{"name":"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc","@id":"https:\/\/liangroup.net\/blog\/#\/schema\/person\/e328f67a35a843fd3accc4666b5eab0a"},"headline":"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite","datePublished":"2025-05-26T12:16:15+00:00","mainEntityOfPage":{"@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/"},"wordCount":316,"commentCount":0,"image":{"@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/#primaryimage"},"thumbnailUrl":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1731342183597.jpg","articleSection":["\u0622\u0645\u0648\u0632\u0634\u200c\u0647\u0627\u06cc \u0644\u06cc\u0627\u0646","\u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u0648 \u0627\u0645\u0646\u06cc\u062a","\u0645\u0642\u0627\u0644\u0627\u062a \u062a\u0633\u062a \u0646\u0641\u0648\u0630","\u06cc\u06cc\u06cc\u06cc \u0627\u0633\u0644\u0627\u06cc\u062f"],"inLanguage":"fa-IR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/","url":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/","name":"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite - \u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646","isPartOf":{"@id":"https:\/\/liangroup.net\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/#primaryimage"},"image":{"@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/#primaryimage"},"thumbnailUrl":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1731342183597.jpg","datePublished":"2025-05-26T12:16:15+00:00","author":{"@id":"https:\/\/liangroup.net\/blog\/#\/schema\/person\/e328f67a35a843fd3accc4666b5eab0a"},"description":"\u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0627\u0632 \u062f\u0627\u0631\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646\u060c \u062a\u0633\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0631\u06a9\u0627\u0646 \u0627\u0633\u0627\u0633\u06cc \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u06cc\u0645\u0646\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f.","breadcrumb":{"@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/#breadcrumb"},"inLanguage":"fa-IR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/"]}]},{"@type":"ImageObject","inLanguage":"fa-IR","@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/#primaryimage","url":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1731342183597.jpg","contentUrl":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/05\/1731342183597.jpg","width":1072,"height":603,"caption":"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite"},{"@type":"BreadcrumbList","@id":"https:\/\/liangroup.net\/blog\/burpsuite-for-pentester-autorize\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u062e\u0627\u0646\u0647","item":"https:\/\/liangroup.net\/blog\/"},{"@type":"ListItem","position":2,"name":"\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0698\u0648\u0644 Autorize \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Burp Suite"}]},{"@type":"WebSite","@id":"https:\/\/liangroup.net\/blog\/#website","url":"https:\/\/liangroup.net\/blog\/","name":"\u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646","description":"\u0622\u062e\u0631\u06cc\u0646 \u0627\u062e\u0628\u0627\u0631\u060c\u0645\u0642\u0627\u0644\u0627\u062a \u0648 \u0622\u0645\u0648\u0632\u0634\u200c\u0647\u0627\u06cc \u062d\u0648\u0632\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/liangroup.net\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fa-IR"},{"@type":"Person","@id":"https:\/\/liangroup.net\/blog\/#\/schema\/person\/e328f67a35a843fd3accc4666b5eab0a","name":"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc","sameAs":["https:\/\/liangroup.net"],"url":"https:\/\/liangroup.net\/blog\/author\/s-teymouri\/"}]}},"_links":{"self":[{"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/posts\/19543","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/comments?post=19543"}],"version-history":[{"count":0,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/posts\/19543\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/media\/19563"}],"wp:attachment":[{"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/media?parent=19543"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/categories?post=19543"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/tags?post=19543"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}