Skip to content

Latest commit

 

History

History
14 lines (11 loc) · 593 Bytes

README.md

File metadata and controls

14 lines (11 loc) · 593 Bytes

nfcookies

Description

Get your very own Non-Fungible Cookie! Will you be able to get the golden cookie?

Author: @gm_simo

Solution

The website uses the cookie username as a session cookie. This cookie is not signed and simply contains the base64 encoding of the current user's username. It is then possible to change the content of the cookie (for example through the browser) to get access to any user account. The user admin, holder of the Golden Cookie, has the flag as its personal quote.

Flag

havceCTF{cH4rl13_4nd_7he_c00k1e_f4c70Ry}