Simon McCabe

OSCP · OSWP · PWPP · PWPA · PAPA · EnCE · Linux+ · LPIC-1 · Network+ · Security+ · Pentest+ · eJPT · eWPT · BSc · PGCert

Cheesy Does It writeup (BLF)


This one took me a little longer than usual because I fell down a rabbit hole, checked the hint, thought the rabbit hole was correct, so explored it some more, before moving on to other things. Anyway, here goes!

Step 1: Register and order a pizza!

After registering, order any pizza you want by first adding it to the checkout cart:

Step 2: Checkout

Proxy your traffic through burp or whatever tool you use and hit “Checkout”

Step 3: Refund!

After your pizza is delivered, go back into your orders and select the refund option. Capture the request and edit the refund amount and you can choose how much ££££ you can get for your refund. Select as much as you like and send it on. You’ll see the flag in the response:

and in the browser:

Thanks for reading!

LinkedIn X YouTube GitHub