Skip to content

Latest commit

 

History

History
26 lines (14 loc) · 1.05 KB

Shinji'sDrone-L05C03.md

File metadata and controls

26 lines (14 loc) · 1.05 KB

🐼 Shinji’s Drone - L05 C03

Yesterday we spotted a Yakoottees gang member checking out the Superspin HQ, seemingly on a reconnaissance mission. He was seen flying a drone around the building with a video camera attached to it and we've since discovered that he put that video up on his personal site to share with other gang members. We know his username is "shinji" - if we could get in and take a look at the video, we might know better where they intend to target.

Check out the login page on his site and see if you can break in.

Tip: Log in successfully to get the flag.

Need a hint?

💡 Hint: What happens when you try to log in with any credentials? Look at the URL; do you see a way of tricking the site into thinking you are logged in?

Step by Step

  • Press the enter button, the url should change significantly
  • Change loggedin=false to loggedin=true like the image below and press enter again to get the flag

image of url