🧩 Lab — Race condition in the purchasing flow

ℹ️ Info

• This lab contains a race condition in the purchase flow that lets you buy items at an unintended price by applying a coupon with parallel requests.

🎯 Goal

1. Successfully purchase the Lightweight L33t Leather Jacket.

🔐 Credentials

User: wiener
Pass: peter

🛠️ Tools & Recommendations

• Burp Suite (Professional) — recommended: Trigger race conditions custom action (ProbeForRaceCondition.bambda) if available.
• Alternatives: Burp Repeater + Group (Parallel) or Turbo Intruder.
• Browser configured to use Burp with Intercept ON.

🔢 Step-by-step (mix of numbered steps + sub-sections)

1. Log in
   • Open the lab and sign in with the credentials above.
2. Add the jacket to cart
   • Open the Lightweight L33t Leather Jacket product page → click Add to cart.
   • Go to Cart to prepare checkout.
3. Prepare to apply the coupon (Intercept)
   • On the Cart page: enter the coupon code and click Apply.
   • With Burp Intercept ON, intercept the coupon-application request.
   • Send the intercepted request to Repeater.