tl;dr:1. Extract list of endpoints and how to use them2. Register account3. Find secret logs endpoint and get admin auth token4. Break admin rng number from the token5. Recover list of admin links by trying to add new one with existing name6. Share flag link with your user
Full writeup: https://github.com/p4-team/ctf/tree/master/2019-11-16-asis-finals/sharel