Modifying requests in Burp Proxy - Port Swigger
Summary: PortSwigger's tutorial walks through intercepting a POST /cart request in Burp Proxy on a deliberately vulnerable practice shopping site, changing the price parameter from the item's price in cents to 1, and forwarding it so a leather jacket is added to the cart for one cent. The lesson notes the price cannot be changed through the web interface and that the modification was possible only through Burp Proxy, completing a Web Security Academy lab.
Why it matters: The server accepted a client-supplied price parameter and charged a penny for the item, a reminder that any value the browser sends, including price, can be rewritten before it reaches your application.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026