initial commit

de-monne-slayer/no-holding-back/README.md

@@ -0,0 +1,20 @@
+# No Holding Back
+
+**Category:** De Monne Slayer
+
+**Points:** 210
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/demonneslayer.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@syyntax\</code>\</sup>
+
+DEADFACE was able to extract bank data from several of De Monne's customers. Something in the app's logic allows DEADFACE to gather details from pretty much any user they want. DEADFACE claims they left a flag behind as proof that they have access to De Monne's customer data. The problem is, we don't know who the user is (or their password).
+
+Submit the flag as `deadface{flag_text}`
+
+\> Use the ZIP from **Hard Kept Secrets**
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)