Big Shop

Author: Aneesh

Analysis

first we have to login and then we can see two products and with 200 and 100 price respectively.We can add both the products to the cart but we can't buy because it shows you have not enough money

Solution

But there is an idor vulnerablity in the buying requests ,we can change the and it will buy the flag then we can open flag