Nome Utente: 
Password : 
Restringi sessione all'IP 
Domande  |  score: 6  |  7.20 9.00 10.00 |  Risolta da 7 persone  |  2316342 views  |  da 21 Apr 2021 - 18:03:03

Temper (Crypto, Exploit)

Temper
Hello Utente non registrato

To speed up our websites, we decided to store sessions inside the browser's cookies.
The cookies are encrypted, so nobody should be able to temper with them.
However, some user was able to impersonate as another one, despite the encryption!

Can you reproduce this? If so, login as the user 'System'.
As a starting point, try to login as user:user
You are also given the source for the cookie library and site login.

Good Luck!
gizmore
© 2021, 2022, 2023, 2024 e 2025 by jusb3