Infinite money logic flaw (Video solution, Audio)

[@omarelebiary8900]

This lab is very complicated

[@janwrona9539]

My first though before seening you video was to use Grep - Extract , but this macro stuff is insane ! Thanks for your great content :)

[@tbltjrd3918]

I don't understand why the get request to my account triggers the macro. After the macro testing part, going to intruder to spam the account page with get request seems unrelated.

[@vilislacis3337]

I didn't know about Macro Recorder, so I just ran Intruder about 7 times with increasing number of gift cards each time. After this, I had enough credit to get the jacket with a coupon applied.

[@0x2fd]

same

[@imamuddinalmustaqim8138]

I dont understand, after success test macro with same order steps that |'ve followed, the intruder result decreases my money and doesn't increase, but rather the cart store increases

[@vishalraj_bittu_3483]

same bhai

[@gianb12]

como lo solucionaste?

[@GG-go7jv]

code change in length ==> so if you use length to extract gift code you fail sometimes and decrease money if you fail more than 1 on 3

[@kiranbh4483]

i am not able to select those 5 end points

[@yashikagupta6064]

use CTRL + CLICK

[@JuanBotes]

very educational burp lab - thanks \o/

[@GG-go7jv]

279 attack is enough with 30% coupon.

[@落珰]

谢谢你，虽然有些绕

[@ilkerylmaz]

if you have not burpsuite professional get help from python :)

[@vasumudiraj8327]

how you spell url....... hahahahahhahahahahahaha

[@Fleeenz]

With the initial store credit you can purchase 14 gift cards, it’s possible to send all 14 codes directly to /gift-card to speed up the whole process?

[@vilislacis3337]

No, you need to loop thru them and to 14 POSTs.