$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: GraphQL-based analytics platform with password reset via 4-digit PIN. Apollo Server has batching enabled. Solution: Triggered admin password reset, then brute-forced all 10,000 PINs via GraphQL batching (1000 mutations per request, 10 requests total), bypassing rate limiting. Logged in as admin, found flag at /settings.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar