NexaCorp: Zero Credentials

NexaCorp is a fictional enterprise cloud company running a modern full-stack web application. You have been handed one thing: the URL (nexacorp.ine.local) of their production portal. No credentials, no documentation, no hints. From that single starting point, you will work through a five-stage attack chain that mirrors how real enterprise breaches unfold each vulnerability exposing a secret or privilege that makes the next step possible. The environment runs on a live server with real backends.