Tags: flask oauth web python
Rating:
TL;DR
1. Register a normal user, who will catch the notes.
2. Register an account on one of the 4 oauth providers (discord, reddit, github and gitlab) with the same name as the user with the flag.
3. Register to the website using one of the 4 oAuth providers.
4. Make several requests to share notes from the ctfzone_admin with our normal user.
5. Log in to normal user account an read the flag.
[Read more](https://github.com/kukuxumushi/Writeups/blob/main/CTFZONE2022/Social%20Notes%20writeup/SocialNoteswriteup.md)