$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: GraphQL-based analytics platform with OTP-protected admin reports and per-request rate limiting. Solution: bypass rate limit via GraphQL aliased mutation batching to brute-force 4-digit OTP in a single HTTP request, then access admin reports with verified JWT.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar