Skip to main content

picoCTF2018 – Web – Logon

picoCTF2018 – Web – Logon

Objective:
I made a website so now you can log on to! I don't seem to have the admin password. See if you can't get to the flag. http://2018shell.picoctf.com:62746 (link [1] )


Solution:
So there doesn’t appear to be any check on the actually login here to make sure the user/pass is real

I punched in doug for the username and as;ldkjfa;lsdkj for the password

After getting past the login screen I check on the cookies and sure enough there is a session cookie named admin which has the value set to false. I just changed it to true and reloaded the page








picoCTF{l0g1ns_ar3nt_r34l_92020990}




Comments