None of these challenges require bruteforcing. Please don't do it. They only require your head.
Challenge 1 (easy) - Original Tweet
Challenge 2 (difficult) - Original Tweet
Thanks to everyone who inspired building these including HackerOne, BugCrowd and Synack.
Especially Jobert Abma, Ben Sadeighpour, Jason Haddix, James Kettle, FileDescriptor and the many others who have all shared engrossing CTFs
If you enjoy this challenge, please consider supporting it and the more to follow by buying my book Web Hacking 101.