logon

https://play.picoctf.org/practice/challenge/46?page=5 ![[Screenshot 2024-02-05 at 3.24.21 PM.png]]

• Trying to login as Joe doesn't work, but using a different username and a random password will log you in ![[Screenshot 2024-02-05 at 3.28.29 PM.png]]

• Going into inspect > application > cookies, you can see details, including admin: False

• Also notice that the url changed to /flag

• So changing the admin cookie to True and then reloading the flag page, you get the flag