<p>https://labs.hackxpert.com/IDOR/IDOR2/getToken.php?user=939</p><p>Found <!---a href='getToken.php?user=2' class='w3-bar-item w3-button'>getToken</a>--> after looking in Burp suite and doing POST, so I edited the url in my normal browser and got the flag. Not sure if I'm supposed to submit it somewhere but oh well!</p><p>d41d8cd98f00b204e9800998ecf8427e</p>
Posted by: test
Views: 0
2025-06-30 15:53:59