ctf 2 Revoked & Revoked Revenge — SQLi to JWT Revocation Bypass Nov 29, 2025 NoSQL Injection — Dumping the Admin Password Jun 19, 2025