A Flask application with registration and login. After login the session cookie is derived from the user name only, so it can be computed for any user.
Pas commencéDockercommit b5de4d6x86_64 · aarch64Secret
Get logged in as the admin user without knowing the admin password by forging the session cookie (authentication bypass).
Le brief de ce lab se trouve dans son dépôt.