An Express site where only Michelle's account can read the flag. The login form's body is parsed with extended syntax and passed to the mysql library's query placeholders.
Not startedDockercommit 50437d4x86_64 · aarch64Secret
Log in as Michelle without her password and read the flag on the flag page.
The brief for this lab lives in its repository.