Looking at the network tab in the dev tools, we see the isAdmin cookie parameter. It seems that all we have to do is intercept the traffic and change the cookie param to 1.
Taking it over to Burp Suite, we change the value of the isAdmin cookie param, and there it is, the FLAG.
FLAG: picoCTF{gr4d3_A_c00k13_65fd1e1a}



Top comments (0)