Lab: Exploiting an API endpoint using documentation

1. In Burp's browser, log in to the application using the credentials wiener:peter and update your email address.

2. In Proxy > HTTP history, right-click the PATCH /api/user/wiener request and select Send to Repeater.

3. Go to the Repeater tab. Send the PATCH /api/user/wiener request. Notice that this retrieves credentials for the user wiener.

4. Remove /wiener from the path of the request, so the endpoint is now /api/user, then send the request. Notice that this returns an error because there is no user identifier.

5. Remove /user from the path of the request, so the endpoint is now /api, then send the request. Notice that this retrieves API documentation.

6. Right-click the response and select Show response in browser. Copy the URL.

7. Paste the URL into Burp's browser to access the documentation. Notice that the documentation is interactive.

8. To delete Carlos and solve the lab, click on the DELETE row, enter carlos, then click Send request.

Intigriti

Popo Hack