Abusing HTTP Misconfigurations

[cherryeater]

Hi!
Did you follow it?

Abusing http misconfigurations

You will need to attempt to access the Admin area with the provided credentials . You will need to have two tabs open. Then you can test the forms found at login (in the second tab) to determine which will get you admin area access. Don’t overthink it and it can be done with two browser tabs open.