NoSQL Injection
I think i found the username like flag... but i cannot validate it..
i just copied it and pasted to the validation form.