Logon.md

Logon

Challenge Description

The factory is hiding things from all of its users. Can you login as Joe and find what they've been looking at? https://jupiter.challenges.picoctf.org/problem/44573/ or http://jupiter.challenges.picoctf.org:44573

My Solution Flowchart

1. I opened the webpage and there is two input fields which takes username and password as login credentials.

2. I tried to login with username=Joe and a random password and failed

3. Then I just tried again with some random username and password. It worked username=kpabyt and password=kpabyt

4. Then I thought there can be something in session storage or local storage or cookies because we have logged in and there must be some kind of auth key saved somewhere.

5. I looked around and found one cookie named admin which has False value

6. I modified the value of admin to True and reload the page and the flag is here..