Unprotected Admin Functionality With Unpredictable URL | Web Security Academy (Audio)
This Video Shows the Lab Solution of the unprotected admin panel. It's located at an unpredictable location, but the location is disclosed somewhere in the application.
Solve the lab by accessing the admin panel, and using it to delete the user Carlos.