Exploiting server side parameter pollution in a REST URL
To solve the lab, log in as the administrator and delete carlos. Required knowledge
To solve this lab, you'll need to know:
How to identify whether a user input is included in a server-side URL path or query string.
How to use path traversal sequences to attempt to change a server-side request.
How to discover API documentation.
These points are covered in our API Testing Academy topic.
https://siunam321.github.io/ctf/portswigger-labs/api-testing/api-5/