This one took me a little longer than usual because I fell down a rabbit hole, checked the hint, thought the rabbit hole was correct, so explored it some more, before moving on to other things. Anyway, here goes!
Step 1: Register and order a pizza!
After registering, order any pizza you want by first adding it to the checkout cart:
Step 2: Checkout
Proxy your traffic through burp or whatever tool you use and hit “Checkout”
Step 3: Refund!
After your pizza is delivered, go back into your orders and select the refund option. Capture the request and edit the refund amount and you can choose how much ££££ you can get for your refund. Select as much as you like and send it on. You’ll see the flag in the response:
and in the browser:
Thanks for reading!
