webProeasy
Печеньки с молочком (Cookies with Milk)
duckerz
Task: Web login form sets base64-encoded session cookie with status field. Solution: Decode cookie, change status from regular to admin, re-encode and access admin dashboard to get flag.
$ ls tags/ techniques/
base64_decodecookie_tamperingprivilege_escalation
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]143 - Личный блог— duckerz
- [web][Pro]Лысина админа (Admin's Bald Head)— duckerz
- [web][Pro]Cookies— hackerlab
- [web][Pro]Привилегированный гость (Privileged Guest)— hackerlab
- [web][Pro]Доступ запрещён (Access Denied)— hackerlab