greenB31n

What reference is recorded for the unauthorized addition to the target project's team?

Not everything stored as config should be treated as safe.

Every platform has an entry point. Find it

You walk through a door using an identity you forged

The server fetches something internal on your behalf

You gave yourself access the system never intended to grant

A credential meant for someone else ends up in your hands

Something was left exposed that shouldn't be public

Data is only as secure as its weakest link. Can you uncover information that shouldn't be accessible?

A system's curiosity can sometimes lead it to unexpected places. Can you make it fetch something valuable?

Certain reports are meant for specific eyes only. Can you access what's not meant for you?

Sometimes, what you send isn't what's saved. Can you manipulate the system to reveal what's hidden?

Some users have more privileges than others. Can you find something they shouldn't have left exposed?