Mirage Track
Level 15 → Level 16
Unverified Identity
700 pts+100 first-blood bonus
Objective
Workgrid. OIDC that trusts a client-supplied id_token without verifying it. Claim to be admin.
How to play
Open the target in your browser, find the flaw, and exploit it. On success the page reveals the login for the next level — that password is this level's flag. Submit it on the track page (or /submit) to bank the points.
Target
Log in asl15 with the password you captured on the previous level, then:https://mirage-l15.breachlab.org🩸
ACTIVE RECORDFirst Blood captured by