# Lab: Single-endpoint race conditions

To solve the lab:

1. Identify a race condition that lets you claim an arbitrary email address.
2. Change your email address to `carlos@ginandjuice.shop`.
3. Access the admin panel.
4. Delete the user `carlos`

First Login Using Given Credential and Then Update any Email and Capture The Request In Burp !!

<figure><img src="/files/Loc597vU3IvFWFAd5Wyc" alt=""><figcaption></figcaption></figure>

Then We add Two Request In Group and Then and Send The Sequence and Check The Response Time Both Have approx Similar Response Time Let's Use The Race Condition !!

<figure><img src="/files/3hVmmQGlXm3E3JvkBniP" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/Pf7CPPwbkC6WT4dwAcWV" alt=""><figcaption></figcaption></figure>

Then I Use My exploit email and in Second Request I use carlos Email and Send The Request In Parallel and Check The Email Server !!

<figure><img src="/files/5Go4d7LcQ7OboKgR8GUe" alt=""><figcaption></figcaption></figure>

Finally Our Race Condition  Work  !!

<figure><img src="/files/McfsEivPxB87vbmcv0bI" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/S1Le45YFKPYyfIWLgz88" alt=""><figcaption></figcaption></figure>

Now We Have a Admin Panel Let's Delete The Carlos User !!

<figure><img src="/files/XnxBaJyY0a5erzTIQ1E5" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/6TW4fL0S6G13LlSehIke" alt=""><figcaption></figcaption></figure>

We Solve The Lab after Delete The Carlos User !!

<figure><img src="/files/5qQi7OLwum4xXWDVxOP6" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://ankur-gautam.gitbook.io/writeups/ctf-writeups/portswigger-web-security-academy/race-condition/lab-single-endpoint-race-conditions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.