Ticketastic: Live Instance

Flag0 – Found

• This level and the Ticketastic demo instance are running the same code
• Take a look at addUser on the demo instance
• What is missing?
• Humans might read these tickets and interact with them
• Links in tickets could be interesting

Flag1 – Found

• How do others log into this instance?
• The login form reveals more than it should
• So does the ticket endpoint