mediumFree
PhoneVault
An online phone retailer with a customer review system and an admin moderation panel.
stored-xsscsp-bypassjsonpcookie-theftadmin-bot
nodejsexpressejssql.jspuppeteernginx
The Scenario
PhoneVault's CTO got a tip from a former contractor: "a regular customer account is enough to pull the moderator's session." Two weeks before launch, she's not taking chances. Sign up, look around, and see if you can reach the admin dashboard.