Exploiting server-side parameter pollution in a query string | PortSwigger Academy tutorial

PortSwigger Academy Lab: https://portswigger.net/web-security/api-testing/server-side-parameter-pollution/lab-exploiting-server-side-parameter-pollution-in-query-string Free Burp Suite Professional trial: https://portswigger.net/burp/pro/trial List of server-side variable names: https://github.com/antichown/burp-payloads/blob/master/Server-side%20variable%20names.pay