TryHackMe : Do Not Disturb Writeup
TL;DR Byte Lotus Poolside is a Node.js/Express booking app. A NoSQL injection in the login endpoint bypasses authentication entirely and lands directly in the staff role. The staff console's booking-c
Aug 4, 20268 min read8
