Flag0 -- Found
- This level and the Ticketastic demo instance are running the same code
- Take a look at addUser on the demo instance
- What is missing?
- Humans might read these tickets and interact with them
- Links in tickets could be interesting
Flag1 -- Found
- How do others log into this instance?
- The login form reveals more than it should
- So does the ticket endpoint