[hackemall]

sorry i found that and couldnt get it to work if i come up with the script i will share it

[4rrows]

You have to intercept the spin request with burp you will see an authorization header decode it with base64 and use that password to brute force ssh users . you will find the first flag. you can do it

Got the first flag, any hint on how to get root?