$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: Cryptocurrency exchange platform with documented public/private API endpoints; admin endpoint claims to require API key + HMAC signature. Solution: The admin endpoint /api/internal/account-settings has zero authentication enforcement — a plain GET request returns full platform configuration including the master API secret (flag).
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar