> For the complete documentation index, see [llms.txt](https://kathan19.gitbook.io/howtohunt/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kathan19.gitbook.io/howtohunt/rate-limit/no-rate-limit-on-promo.md).

# No Rate-limit on Promo

## Steps To Reproduce:

* 1. Go to URL - `https://abc.target.com/product/121/checkout/promo`
* 2. Navigate to `Offer/Promo/Coupon code` option
* 3. Enter the random digit
* 4. `Intercept the Request` and Send to intruder
* 5. Apply payload & `Start attack`

## Impact :

* Financial Loss, an attacker can easily bruteforce all promo/coupon/Offer codes.