Unprotected admin functionality with unpredictable URL
Unprotected admin functionality with unpredictable URL
Visit and complete the original lab on PortSwigger's website
New to Burp Suite? Learn how to set up Burp Suite for the first time.
LAB
This lab has an unprotected admin panel. It's located at an unpredictable location, but the location is disclosed somewhere in the application.
Solve the lab by accessing the admin panel, and using it to delete the user carlos.