• 2024-09-18[PortSwigger] Lab: Finding and exploiting an unused API endpoint
    登入,加入Lightweightl33tLeatherJacket到購物車,結帳發現是錢不夠看前端jshttps://0a63004a0420062c80b83ad30022000c.web-security-academy.net/resources/js/api/productPrice.js會去拿product的價格找到api改成post,發現product有個patch可以用改成patch,提示con