info :

This lab doesn't adequately validate user input. You can exploit a logic flaw in its purchasing workflow to buy items for an unintended price

Goal :

To solve the lab, buy a "Lightweight l33t leather jacket".

You can log in to your own account using the following credentials: wiener:peter


First i will login with Credentials

and i will go to the target product Click on the add to cart button and intercept this request > Send to repeater

and Go again to the browser an remove the product from the cart to make the cart empty after that go to the

request again and make the price any number less than 100 and don’t make the price = 0 the lab will not solved make it any number except the zero

image.png

and send the request > Go to the browser and refresh

her we go you will see the price of the product will be 0.50 $

and click on place order now the lab ahs been solved

image.png

Congrats You solved the lab