KEY NOTE: how to print all applications installed on the system, sorts larger to smaller

Screenshot 2023-10-12 at 12.05.09 AM.png

File Inclusion

?account=1009 can be changed to ?account=1010 to access different accounts such as admin.

Screenshot 2023-10-11 at 10.14.51 AM.png

Screenshot 2023-10-11 at 10.22.57 AM.png

the cURL requests can be sent to the Burp Suite with -x http://127.0.0.1:8080

Screenshot 2023-10-11 at 10.27.17 AM.png

Screenshot 2023-10-11 at 10.28.52 AM.png

jeremy JWT token

eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0=.eyJ1c2VyIjoiamVyZW15Iiwicm9sZSI6InN0YWZmIn0=.

jessamy JWT token eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0=.eyJ1c2VyIjoiamVzc2FteSIsInJvbGUiOiJhZG1pbiJ9.