Open-to-admins

Point: 200

Category

Web Exploitation

Question

This secure website allows users to access the flag only if they are admin and if the time is exactly 1400. https://2019shell1.picoctf.com/problem/45127/ (link) or http://2019shell1.picoctf.com:45127

Hint

Can cookies help you to get the flag?

Solution

Open console in Chrome Developer Tool, then set cookie info like this.

document.cookie="admin=True"
docment.cookie="time=1400"

Finally, Click to flag button, we've got the flag

Flag

picoCTF{0p3n_t0_adm1n5_42e59862}