$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: Organization management platform with GraphQL API; member credentials provided, admin secrets should be restricted. Solution: Introspection reveals orgSecrets query; resolver lacks role-based authorization, allowing any authenticated user to read admin API secrets including the flag.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar