How I Hunt Broken Access Control

A methodology writeup. No named targets, no live exploits — just how I think about who’s allowed to touch what.