$ cat writeup.md…
$ cat writeup.md…
hackerlab
Task: NoSQL Document Store with JSON API search endpoint. Solution: Used $or operator to bypass ACL filter and access hidden document, then blind NoSQL injection with $regex to extract flag from hidden field character-by-character.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar