Never click on links received from unknown sources. Can you capture the flags and get admin access to the web app?
This challenge will test client-side exploitation skills, from inspecting JavaScript to manipulating cookies to launching CSRF/XSS attacks.