Go to URL - https://abc.target.com/product/121/checkout/promo
https://abc.target.com/product/121/checkout/promo
Navigate to Offer/Promo/Coupon code option
Offer/Promo/Coupon code
Enter the random digit
Intercept the Request and Send to intruder
Intercept the Request
Apply payload & Start attack
Start attack
Financial Loss, an attacker can easily bruteforce all promo/coupon/Offer codes.
Last updated 1 year ago
Was this helpful?