
We tried using localhost in the stock check feature but encountered the following error. Attempts with 127.0.0.1 also failed:


We tried URL encoding the character 'a' once, but it still failed:

After double URL encoding it:

It worked, allowing us to access the internal admin panel, delete the carlos user, and successfully solve the lab:
