> For the complete documentation index, see [llms.txt](https://notes.dollarboysushil.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.dollarboysushil.com/web-application-pentest/bugforge/business-logic-flaw/cafe-club.md).

# Cafe Club

Level: Easy\
Points: 10\
Type: Daily Challenge

Lab Interface

<figure><img src="/files/WuRVXCJqrxTn9kZ2mPO8" alt=""><figcaption></figcaption></figure>

There exist Gift Cards feature.

<figure><img src="/files/Ky2kbLul0ZJ4pZYewt1c" alt=""><figcaption></figcaption></figure>

We can purchase gift card and redeem it.

<figure><img src="/files/l5VQtxbKh6OJCJcigxje" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/332RzZgnFdw6CUGWMAyi" alt=""><figcaption></figcaption></figure>

Key thing to notice here. Every time we purchase and redeem gift card, The code is predictable

`CAFE-0903-AXXX`&#x20;

<figure><img src="/files/zo8QW3y5uALhriYciDwk" alt=""><figcaption></figcaption></figure>

Only the last 3 characters are different, and they looks like capital alphabetical characters.\
With this in mind, we can try to bruteforce and redeem gift cards of other.

<figure><img src="/files/DGLBwtGJdjnU0KEfrliL" alt=""><figcaption></figcaption></figure>

And we have some 200 OK Response

<figure><img src="/files/bXrlG9ex9Rf80J8mfvRi" alt=""><figcaption></figcaption></figure>