Iceman - dalCTF 2026
Flag: dalctf2026{open-ticket-send-me-ur-fav-song-in-album6}Category: Web / GraphQL / JWT
Overview
A music-themed GraphQL API protected by JWT-based tier access control. The goal was to escalate from
exploitnotes.hashnode.dev4 min read