📊 Challenge Overview

Category	Details	Additional Info
🏆 Event	PicoGym	Event Link
🔰 Category	Web	🌐
💎 Points		Out of 500 total
⭐ Difficulty	🟡 Medium	Personal Rating: 0/10
👤 Author	LT ‘syreal’ Jones	Profile
🎮 Solves (At the time of flag submission)	28.440	solve rate
📅 Date	13-02-2025	PicoGym
🦾 Solved By	mH4ck3r0n3	Team:

📝 Challenge Information

Can you get the flag?

🎯 Challenge Files & Infrastructure

Provided Files

1	Files: None

🔍 Initial Analysis

First Steps

Initially, the website appears as follows:

By clicking on continue as a guest, I got the following page:

As the title of the challenge suggests, I decided to inspect the cookies using ChromeDevTools:

As we can see, we have a PHPSESSID, which are the standard session cookies for PHP, indicating that the user has an active session, and then we have isAdmin set to 0, which indicates whether the user with the active session is an admin or not. Since the value 0 equals False in boolean logic, it’s highly likely that setting this value to 1 will result in True, thus granting admin access (privileged user).

🎯 Solution Path

Exploitation Steps

Initial setup

To modify the cookies, you need to open the Application tab in the DeveloperTools (CTRL+SHIFT+I), then go to the Cookie section. By double-clicking on the value of the cookie, you can modify it. After making the changes, simply refresh the page with F5, and the new cookies will be automatically applied.

Exploitation

I simply followed the procedure I just described, setting isAdmin=1, and after refreshing the page, I obtained the flag.

Flag capture

🛠️ Exploitation Process

Approach

L’exploit automatico fa una richiesta GET (con una sessione) alla pagina per estrapolare i cookies, dopodichè il modifica settando isAdmin=1 e fa un ulteriore richiesta GET per estrarre la flag dalla risposta tramite una regex.

•  Exploit

🚩 Flag Capture

Flag

Proof of Execution

Screenshot of successful exploitation

🔧 Tools Used

Tool	Purpose
Python	Exploit
ChromeDevTools	Web Testing

💡 Key Learnings

Skills Improved

• Binary Exploitation
• Reverse Engineering
• Web Exploitation
• Cryptography
• Forensics
• OSINT
• Miscellaneous

📊 Final Statistics

Created: 13-02-2025 • Last Modified: 13-02-2025 *Author: mH4ck3r0n3 • Team: *