(^o^)/
Exploiting a race condition in a PHP web application to buy the flag.
Exploiting a side-channel in the PHP-SPX profiler to recover an admin password.