Saiko Labs
A live, deployable web box. Launch your own instance, find the auth bypass, and pull the flag.
This challenge runs as a live container. Click "Launch instance" to spin up your own copy, open the link, and explore. The app decides who is an admin from a value you control. Only admins can see the ops panel — so become one. (The instance is yours alone and auto-expires. Relaunch anytime.)