Tags: web

Rating:

When I go on the page it says that Only the Admin can see the flag And you aren't the admin

Lets's take a look at network requests, localstorage, cookies itd. as in standard web challenge.

It looks like there are tow cookies

tm_admin 0

tm_user 294de3557d9d00b3d2d8a1e6aab028cf

I changed the first cookie value to 1 The second cookie is a md5 hash which states anonymous So I calculated md5 of admin and the hash is 21232f297a57a5a743894a0e4a801fc3 After refreshing the page I am an admin.