Ok, since this is seems a bit confusing so here is a deeper explaination:

1) The userid is your real wechall userid. You can change it and play for other accounts, but it wont help you when you mess with it.

2) No bruteforcing is needed for this one, you can use a browser to exploit it with a 100% success rate.

3) The title is a hint and there is a hint on the main page of this challenge.



I hope i answered the faq for it :)

Happy Challenging
The geeks shall inherit the properties and methods of object earth.

The following users subscribed to the thread and receive email on a new post: TheHiveMindZ