Description

The factory is hiding things from all of its users. Can you login as Joe and find what they’ve been looking at? https://jupiter.challenges.picoctf.org/problem/44573/ (link) or http://jupiter.challenges.picoctf.org:44573

Solution

Go to the link, we see a login page.

I read the source code but there were no useful information.

I just cliked every buttons and I noticed we can login without any credentials.

I inspect the page to see cookies for it.

In the cookie, there is admin and it’s set to False.

I changed it to True and refresh the page.