$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: SaaS workspace platform with GraphQL API; given member account with manage_members permission. Solution: GraphQL introspection revealed updateMembership mutation that lacks self-modification check — escalated own membership to full_admin, then queried adminSecrets for the flag.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar