Lab - Unprotected admin functionality with unpredictable URL

Checking the source code of the page, we were able to find the admin panel directory :

We visited the page and removed the carlos user and solved the lab :

---