7.8 Lab: Referer-based access control | 2024

This lab controls access to certain admin functionality based on the Referer header. You can familiarize yourself with the admin panel by logging in using the credentials administrator:admin.

To solve the lab, log in using the credentials wiener:peter and exploit the flawed access controls to promote yourself to become an administrator.

Log in to the Admin Account and click the Admin PanelChoose Carlos, Click Upgrade, and Capture the request and send it to Repeater.Logout from the Account, Log in to wiener Account and capture the request of My-Account or Anything which consists of Wiener’s Session Cookie. Or you can use Cookie Editor to get the cookie of the wiener.Copy that Session cookies, go to the repeater, and paste the session into the request we captured from the Admin’s Account.Change the Value of the username to wiener, and send the request.The Lab will be solved then.