A Flask application that keeps the logged-in user name in an AES-CBC encrypted cookie.
Pas commencéDockercommit 16caaa9x86_64 · aarch64Secret
Exploit the insecure direct object reference weakness of a Flask application that keeps the logged-in user name in an AES-CBC encrypted cookie and recover the flag (FLAG{...}) it guards.
Le brief de ce lab se trouve dans son dépôt.