# Application Logic Bypasses

![](https://1889062997-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LbWrDBBrbM1WtGeIKRO%2F-MTJmXYuRbUyJjlWtJJQ%2F-MTJmfmZ4qVOgnYvcRPV%2Fimage.png?alt=media\&token=0f6cfacc-e690-4e95-b140-320225b2ff03)

* [GET /admin HTTP/1.1 Host: http://site.com ... Access is denied GET /test HTTP/1.1 Host: http://site.com X-Original-URL: /admin HTTP/1.1 200 OK](https://twitter.com/hunter0x7/status/1312110348841840640?s=20)
