0 Click Account Takeover via Cookie Switching
Challenge Description
You've discovered a router reseller company running both staging and production environments. But are they really separate?
Based on a real critical finding where improper session management across environments led to complete account takeover without any user interaction.
Your mission, should you choose to accept it: explore both environments, understand how sessions are handled and break into production - use what you learn to extract the flag.
Challenge URL
Invia Flag
