Sounds like a very solid test of the company's resilience to social engineering. I know that a solid icebreaker with many techies is "this weird bug I found once", a few hours and a few pints and that'll easily turn into "that time we didn't have any budget to sanitise our inputs"...
Biting the hand that feeds IT
