Burp Suite User Forum

Create new post

Possible Error in Lab: Exploiting path mapping for web cache deception

akibaRubi | Last updated: Aug 16, 2024 09:17AM UTC

After going through the outlined steps, the API key for carlos is not included in the response

Dominyque, PortSwigger Agent | Last updated: Aug 16, 2024 10:19AM UTC

Hi, I have just tested the lab and can confirm that Carlos' API key is included in the response: https://snipboard.io/2mCHOl.jpg Can you please send us a screen recording of the steps you have taken so we can better advise? You can send this to support@portswigger.net

akibaRubi | Last updated: Aug 20, 2024 12:01PM UTC

I have solved the Lab. I clicked on view exploit button and was redirected to the page that displayed Carlos' API key.

Genry | Last updated: Sep 04, 2024 08:13PM UTC

After writing this message it begin works. I tried solve lab about 30-40 minutes with renew lab instance and access log were empty in both cases

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.