This lab has a stock check feature which fetches data from an internal system.
To solve the lab, change the stock check URL to access the admin interface at
http://192.168.0.12:8080/admin and delete the user
The stock checker has been restricted to only access the local application, so you will need to find an open redirect affecting the application first.
stockApiparameter and observe that it isn't possible to make the server issue the request directly to a different host.
pathparameter is placed into the Location header of a redirection response, resulting in an open redirection.
stockApiparameter on the stock checker: