URL based access control can be circumvented (Video solution)

[@cpaig147]

Hey man... good video... but i cant seem to get the last piece to work where i'm supposed to add X-Original-URL: /invalid and switch to X-Original-URL: /admin Burp Suite simply hangs... Any reason why this is the case? I've read everything i can get my hands on, but nothing talks about this specific issue.

[@christianhepler7798]

yeah, i'm having the same problem too.

[@muramarco01]

Add it on the second line instead of at the bottom

[@mostafanasser3065]

same problem

[@LompePyro]

I had to restart Burpsuite. I tried for 30 minutes at given moment and ended here on this video after a bit frustration. And Burpsuite kept hanging for no reason. Until i restarted it. And literal everything worked how it should. I used the HTTP-Header just on the last line.

[@vnvinothkumar]

Thanks Bro. May god bless you

[@mostafanasser3065]

I did every thing and nothing Happens

[@malikimranawan3762]

lob you

[@masusadams1055]

video is incomplete

[@Michael10Sommer]

What do you mean?

[@masusadams1055]

Michael Sommer my bad, missed the ending