$ ctf42

Sharkshop

Forensics weight 24.60 No technique tags yet.
Difficulty Not rated yet

Flag format: fwectf{...}

Forensic Web Medium t-chen

開発途中のECサイトで管理者ユーザーのパスワードが流出した。現在、利用された可能性のある脆弱性は修正されたが、パスワードの変更はまだ行われていないようだ。その時にキャプチャされた攻撃者の通信記録から、パスワードを推測し"admin"ユーザーとしてログインしてください。

During the development of an e-commerce website, the password of the administrator user was leaked. The vulnerabilities that may have been exploited have already been fixed, but it seems the password has not yet been changed. From the captured communication logs of the attacker at that time, deduce the password and log in as the "admin" user.

Writeups

Official

No official writeup linked.

Community

No community writeups yet. Solved it? Share how.

Log in to add a community writeup.