A Flask application that creates PDF documents and serves them by numeric id. Any id can be requested; one of the pre-generated documents is the secret one.
Pas commencéDockercommit 40a788fx86_64 · aarch64Secret
Enumerate the document ids to download a PDF that is not yours and find the secret document (insecure direct object reference).
Le brief de ce lab se trouve dans son dépôt.