SChittimalla839851 (Community Member) asked a question.

Bad Cookie Challenge
Can you hack it?
Having hard timecompleting the lab some help to understand the requirement

To complete this challenge, you will need to perform a number of steps to decode/decrypt a cookie, then to create an encoded/encrypted cookie. You may find it helpful to open the web app in a new tab to inspect the cookie it provides more easily.

  1. Visit the provided web app URL
  2. Try out some passwords
  3. Check your cookies
  4. HTML decode
  5. Base64 decode
  6. MD5 decrypt
  7. Reverse the above process for the original admin user (hint: guess the admin's original user ID)
  8. ????
  9. Welcome to the admin section!

 If you use a tool like 

curl

 

, be sure to include the header argument 

--header 'Origin: https://securitylabs.veracode.com'

 to bypass a warning page for accessing the web app.


JWong894695 likes this.
  • User16877954737335246824 (Veracode, Inc.)

    Hello SaiKumar,

     

    I would recommend you contact our technical support team. Here's how you can log a case:

    1. Navigate to the upper right corner of any page in the Community, and click on your user avatar.

    2. Select Contact Support from the drop-down menu.

     

    Open a case with Support, and the security labs engineer will assist you better.

     

    Regards,

    Pranita

    Veracode Inc.

    Expand Post

Topics (4)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.