# Shady Oaks Financial

Level: Easy\
Points: 10\
Type: Daily Challenge

After Sign-up , login the interesting feature is ability to exchange currency.\
At the beginning, we have €1000

First thing that comes in my mind looking at the conversion feature is possibility of Race Condition.\
For this, I tried to convert all €1000 to USD.

<figure><img src="https://559802299-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8C3FiojCIEtxH7nox2Do%2Fuploads%2FfKpQ1n3bowsF5gj79Fm8%2Fimage.png?alt=media&#x26;token=119ee824-2556-462b-bac9-864c365b982c" alt=""><figcaption></figcaption></figure>

Intercept request,

<figure><img src="https://559802299-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8C3FiojCIEtxH7nox2Do%2Fuploads%2FjTuOWAtsVdNF7bSfJA2U%2Fimage.png?alt=media&#x26;token=b0b51f65-4915-45a1-930f-a3621a87da7f" alt=""><figcaption></figcaption></figure>

Send request to repeater, Drop request from Intercept tab

In repeater tab, create multiple duplicate tab, add all them to group and select send group (parallel)

<figure><img src="https://559802299-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8C3FiojCIEtxH7nox2Do%2Fuploads%2FEVN13wv0sTcsvYeWhwX1%2Fimage.png?alt=media&#x26;token=6521bd26-6e22-4a72-8ca1-28fe41708a8f" alt=""><figcaption></figcaption></figure>

Send request as group (parallel), triggers Race conditions and gives us flag.