$ cat writeup.md…
$ cat writeup.md…
hackerlab
Task: Flask web app with a keyword-based chatbot posing as an AI consultant that guards admin credentials. Solution: extract admin info through crafted queries, trigger hidden password recovery flow, bypass weak identity verification by providing data in the expected format.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar