Tags: web 

Rating:

# Login

![](img/chal.png)

Challenge [Link](http://3.142.122.1:8889/)

There is a login Portal.

![](img/1.png)

I put `admin::admin` as username:password, they showing `Only for user: din_djarin11`.We got username.

![](img/0.png)

Let's check the source code.

![](img/02.png)

From the sourcecode, we know there is a function called `checkIt()` also source is from `main.js`. let's check it.

![](img/2.png)

In the source code we get `MD5` hashed password string `9ef71a8cd681a813cfd377817e9a08e5`. Let's crack it here i used [crackstation](https://crackstation.net/) website.

![](img/3.png)

So we got username and password that is `din_djarin11::ir0nm4n`. Once we login we get a file to download named `ir0nm4n`, we get our from that file.

![](img/flag.png)

```SHELL{th1s_i5_th3_wa7_845ad42f4480104b698c1e168d29b739}```

Original writeup (https://github.com/an0n4ce/CTF-Write-Ups/tree/master/SHELL-CTF-21/Login/README.md).