POST /api/redeem HTTP/1.1 Host: hackviser.com Cookie: session=eyJ1c2VyIjoidGVzdGVyIn0= Content-Type: application/json
You cannot exploit a race condition by clicking a button manually; you need tools that send requests in parallel (at the exact same millisecond). race condition hackviser
Find the functionality that seems vulnerable. Usually, this involves: POST /api/redeem HTTP/1
import threading import requests
Mastering Race Conditions: The Hackviser Guide to Timing Attacks race condition hackviser
This is the most important setting for race conditions in modern Burp Suite.