webeasy

Печеньки с молочком (Cookies with Milk)

duckerz

Task: Web login form sets base64-encoded session cookie with status field. Solution: Decode cookie, change status from regular to admin, re-encode and access admin dashboard to get flag.

$ ls tags/ techniques/
base64access_controlsessionauthenticationcookie
base64_decodecookie_tamperingprivilege_escalation
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]