Dashboard

This is a normal SaaS dashboard. Everything you need is in the nav - but not everything is properly protected. Your session cookie is a JWT; the signing key is weak and the verifier also honours alg:none. Become role:admin.