$ cat writeup.md…
$ cat writeup.md…
hackerdna
Task: MediTrack Health exposes password-reset emails and administrator diagnostics with unsafe host handling. Solution: shorten the poisoned reset URL to disclose its full token, take over the administrator account, inject a shell command, and abuse passwordless sudo find.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar