🚨🚨 Writeup time🚨🚨
1- Saw /admin, 403 forbidden
2- fired up burp
3-send to sequencer
4- added ?admin=true
5- intercept response to this request
6- cat subs.txt | qsreplace = | anew | fkme | dalfox | lorsrf
9- GET -> POST
7- Added ?redirect=true
ADMIN PANEL ACCESSED - 20,500$
