CupidBotThe bot leaks its verification code, which can be replayed to authorize disclosure of all three challenge flags. May 14, 2026 TryHackMe