🛑 Revoked Challenge 1️⃣ Initial Enumeration I started by visiting the challenge website, which exposed: A login page A registration page I initially tested the login form for basic ...

💉 NoSQL Injection — Admin Password Dump 1️⃣ Initial Enumeration While testing the application, I discovered the following endpoint: GET /user/lookup?user=wiener The endpoint returned user i...