Imagine we have this website.

now let’s try to login.

now let’s press select in the role.

nothing happen.

now let’s search for the admin panel.

notice tha we need to be administrators.

now let’s logout from the account and try to login again but this time open the intercept in burp.

now let’s forword this.

drop the role-selector request,

now let’s navigate to the website.

notice that we got the admin panel.

navigate to the admin panel.