Burp Suite User Forum

Create new post

"Lab: Modifying serialized data types", is having unintented solution

Dakshin | Last updated: Feb 10, 2022 08:55AM UTC

I tried to access the admin panel by changing only the username to 'administrator' and its character string value to 13. It throws an error with 3 'access_token'. One of those 'access_token' is the administrator's access_token. So instead of the intended solution which is to change the data type of acces_token to an integer from string, we can now copy paste the administrator's access_token from the error and delete the user carlos.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.