Turbo Intruder - Burp Extensions Series
Challenge explanation - Spoilers
dumpget parameter we can view all funds in the two accounts we control.
amout get parameters we can transfer points to and from accounts.
flag get parameter and by also specifying the account with the
from get parameter we can attempt to buy a flag unsuccessfully due to insufficient funds.
Checking our challenge funds again we can see an extra 50 points have been added to one of our accounts! We now are able to buy the flag!