Flaskcards Skeleton Key

Flaskcards Skeleton Key

Points: 600

Category

Web Exploitation

Question

Nice! You found out they were sending the Secret_key: 385c16dd09098b011d0086f9e218a0a2. Now, can you find a way to log in as admin? http://2018shell1.picoctf.com:48263 (link).

Hint

What can you do with a flask Secret_Key?

The database still reverts every 2 hours

Solution

Unsolved.

Flag

flag