Login

Scenario

Paid course videos unlock only when an API reports paid status true. The front end trusts that JSON field from a user-specific endpoint. Watch premium content without completing checkout.

Your approach

1. Open a locked course page and inspect paid-status API calls.
2. Intercept the response and change paid from false to true.
3. Reload the course page with the modified client state or repeat with a proxy.
4. Confirm videos unlock and the lab shows a bypass flag.
5. Submit the payment bypass flag.