The Hidden Admin Route
SecureLearn hides administration controls from student accounts. The main /admin route denies access, but applications often protect one route and forget a related endpoint. Test the real application routes rather than trusting the navigation menu.
Objective
Reach privileged user-management functionality while authenticated as a student and recover the flag.