Host header authentication bypass

This lab makes an assumption about the privilege level of the user based on the HTTP Host header.

To solve the lab, access the admin panel and delete the user carlos.

Puedes visitar /admin modificando el header Host al valor localhost y luego realizar una request para eliminar al usuario como solicita el ejercicio