when you bruteforce the session cookie and suddenly hit on the admin token
@i0null Has @catsalad seen this!!