Where can there be vulnerabilities (in the website code)?

Question

Information Security

Gentlemen, tell me where there can be vulnerabilities in the site code? (Code attached below)
I have crawled the site with all sorts of utilities ranging from acunetix, .. , burp site.
Of all the reports, the only catch is that it is possible to carry out a CSRF attack. (Substitute user session). And there is no captcha on the authorization form - which threatens with the possibility of brute force.
Maybe I missed something? Tell me which way to dig?
ps task from one ctf (I’m not cunning), I just need help, advice in which direction to look.
Authorization page
code : Registration form code :
Home page code

Answer 1

Post your code properly. If this is CTF, then they can kick you out for automatic scanners, they even kick you out if you break it "incorrectly", one team put the network for 2 hours (one of the types of DDOS) and they were disqualified, although it was necessary to kick out the admins who set up this network .
And according to the subject, you are looking in the wrong place, the vulnerability is most likely in the backend, perhaps sql injection, there may be access to files to which, logically, it should not be, maybe something less banal.

Answer 2

And there is no captcha on the authorization form - which threatens with the possibility of brute force.

Antifraud: Checkmate.