$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: MetricFlow analytics API accepts userId as query parameter without authorization checks. Solution: enumerate user IDs from team page, change userId from 2 to 1 in API request to access admin's private usage events containing the flag.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar