He had the flag. 20 more points. 70 total. He was passing.
He Googled frantically. Password Manager Pro v4.2 had a public exploit: an unauthenticated SQL injection that led to remote code execution. He downloaded the Python script, modified the payload for a reverse shell, and launched it.
Three days later, the email arrived.