Wednesday, 17 June 2020

Where are the Robots ? CTF writeUp

              WHERE ARE THE ROBOTS - CTF Write Up 



Challenge Name:

where are the robots

Challenge Category :

WEB EXPLOITATION


First visit: https://2019shell1.picoctf.com/problem/45102/robots.txt

User-agent: *
Disallow: /8e32f.html

Then visit "disallowed" file: https://2019shell1.picoctf.com/problem/45102/8e32f.html

Flag: picoCTF{ca1cu1at1ng_Mach1n3s_8e32f}



That's You solved the problem.



Video ( CTF WALKTHROUGH


    

                     Youtube video - click here



PLease Subscribe Share This Video






Logon - CTF Write Up

                   CTF WRITE UP



Logon

Points: 150

Category

Web Exploitation

Question

I made a website so now you can log on to! I don't seem to have the admin password. See if you can't get to the flag. (link)

Hint

Hmm it doesn't seem to check anyone's password, except for admins?

How does check the admin's password?

Solution

Using any password and username, you will be able to login, however, upon logon,you will be greeted by:

Success: You logged in! Not sure you'll be able to see the flag though.
No flag for you

Upon inspection of cookies, it can be seen that there exists a cookie names admin with the value false

admins		False			2018shell1.picoctf.com	/	1969-12-31T23:59:59.000Z	10
password	password		2018shell1.picoctf.com	/	1969-12-31T23:59:59.000Z	20
username	username		2018shell1.picoctf.com	/	1969-12-31T23:59:59.000Z	20

Changing the value of admin to True will result in the printing of the flag.

Flag

picoCTF{l0g1ns_ar3nt_r34l_a280e12c}




Video ( CTF WALKTHROUGH )




                    Youtube Link - click Here 👈



PLEASE SHARE AND SUBSCRIBE MY CHANNEL