Posts

Showing posts from October, 2020

MetaCTF 2020 writeup

Image
Hi everybody! I recently took part in MetaCTF CyberGames 2020 which was held on 24 Oct. Here is the link if you want to try the challenges -  https://compete.metactf.com/30/ This is my writeup. Hope you all like it! WEB Exploitation 1. High Security Fan Page Description- Someone has changed the password to the admin panel. We have to find the password. On inspecting the source code we found a suspicious JavaScript being loaded into the page . On visiting the JavaScript we found the username and password to the admin panel. The Flag was the password to the panel. 2.  Everyone Loves a Good Cookie Description-  Cookies are used by websites to keep track of user sessions and help with authentication. Can you spot the issue with this site and convince it that you're authenticated? Upon visiting the page we found an input field and a submit button. We tried common password and hit submit. The page responds with a Set-Cookie parameter as shown below: We tried sending request by changing t