Nimbus Workspaces
A passwordless workspace SaaS with personal and business modes. The finance lead keeps a private note you need to read, and you cannot sign in as her. Find another way in.
- Attempts
- 2
- Solves
- 1
- Published
- 27 Aug 2026
The engagement
Nimbus is a passwordless workspace SaaS. You sign in with a 6-digit code emailed to you, and staff can run both a personal account and any business workspace they administer, switching between the two without signing out.
You're a support agent. An internal review needs a private note kept by Priya Anand, the finance lead — it's referenced in a payroll ticket, but nobody can find it and Priya is out of office. Signing in as her directly is off the table: her account never issues a code you can see, and the login code is rate-limited, so it can't be brute-forced.
You do have your own account, agent@nimbus.local. The sign-in page has a dev inbox that shows your codes.
Goal
Get into Priya's account and read the flag in her private notes.