Advent Of Cyber 2 Try Hack Me [Day 1] A Christmas Crisis

This a new hacking challenge series by Try Hack Me website. This challenge is continue till December 31. They will upload single challenge every single day till the Dec 25. if you complete all the challenges you will get a certificate form try hack me website and can get some prices from their ruffle program.

these are some of the gift you gonna get if you win the ruffle more details

Today I am going to do the first challenge

Now in here we need to log in to the system to do that we need to register to the system first

when we login to the web site using created account this is how its look like

What is the name of the cookie used for authentication?

When you go through the reading material you can see they mention where the cookie details are stored now lets see what is inside that

You can see the name of the cookie is auth

In what format is the value of this cookie encoded?

Now they are telling us to find the format of the auth value

This is the value of the that auth so if you inspect it well you can see it has characters 0 to 9 and A to E so its look likes hexadecimal answer is hexadecimal

Having decoded the cookie, what format is the data stored in?

you can see the format is JSON

Figure out how to bypass the authentication. What is the value of Santa’s cookie?

So you can see after we decode it to ascii username equal to the value that I created call iambat. If we can change that username to santa to we can get the cookie value for that.

So now I change it to the Santa in here and got hexadecimal value

now I have pasted the new value to cookie.
values=”7b22636f6d70616e79223a22546865204265737420466573746976616c20436f6d70616e79222c2022757365726e616d65223a2269616d626174227d

After I refresh the page you can see that all the button are open which mean I have access to Santa's account

Now that you are the Santa user, you can re-activate the assembly line! What is the flag you’re given when the line is fully active?

To get the flag you need to complete it like that.

SLIIT cyber security undergraduate