Progress

15 / 15 bug classes captured (this session).

FINAL: flag{ratcloud_full_chain_domain_owned}

✅ JWT weak secret / alg-none

✅ IDOR (ticket)

✅ Broken access control

✅ CSRF (change email)

✅ Reset host-header poison

✅ Captcha bypass

✅ Reflected XSS

✅ Stored XSS

✅ DOM XSS

✅ SSTI (RCE)

✅ Business logic (coupon)

✅ HTTP parameter pollution

✅ Content discovery

✅ LFI / traversal

✅ Clickjacking