Target

• https://lab00.sqrsec.com

Objectives

1. Discover the username/password to login

2. Bypass the disabled button to access the admin panel

3. Unmask the admin secret key and retrieve the flag