"At this point I asked myself, 'is it really that easy?' I then thought about the two newly discovered vulnerabilities and realized both were in the administrat

"At this point I asked myself, 'is it really that easy?' I then thought about the two newly discovered vulnerabilities and realized both were in the administrative interface after authenticating as the administrative user. I needed to have the same preconditions as the attacker. So I tried to find vulnerabilities without using any of my access credentials."