GetTheFirst, a Node.js and MongoDB application where users register, log in, and view profiles. It shows when its first user was created.
Not startedDockercommit b7ac6ecx86_64 · aarch64Secret
Exploit the insecure direct object reference weakness of getTheFirst, a Node.js and MongoDB application where users register, log in, and view profiles. It shows when its first user was created and recover the flag (FLAG{...}) it guards.
The brief for this lab lives in its repository.