MEDIUM COOKIE
MANIPULATION
Welcome, Operator
A restricted access gateway is guarded by a client-side session check.
Search the server for partner authentication material and manipulate your browser cookies to bypass the gateway perimeter.
Challenge Objectives
- Inspect
robots.txtto uncover internal application endpoints. - Visit the partner portal and extract the encoded session token.
- Decode the Base64 token to reveal the required cookie key-value pair.
- Navigate to the restricted
/secure/gateway and inject the cookie via Browser DevTools. - Bypass the 403 access barrier to unlock the confidential flag.