A Flask application that keeps the logged-in user name in an AES-CBC encrypted cookie.
Not startedDockercommit 16caaa9x86_64 · aarch64Secret
Exploit the insecure direct object reference weakness of a Flask application that keeps the logged-in user name in an AES-CBC encrypted cookie and recover the flag (FLAG{...}) it guards.
The brief for this lab lives in its repository.