Click Me — Cookie Integer Forge to Reach Counter Target
The app tracks clicks with an integer cookie. Skip the clicking by setting ‘cookies’ to 10000000 directly and request the page — the server trusts the cookie value and returns the flag.
Cookie-Manipulation
Cookie Monster — Base64 JSON Cookie Role Elevation
The session cookie is a URL-encoded base64 of a JSON string like ‘id-role-username’. Decode it, change the role to 0 and username to admin, re-encode, and access the admin page.
Sn4ck Sh3nan1gans — UNION SQL Injection via Base64 JSON Cookie
The server reads a base64-encoded JSON cookie containing an ID field and passes it unsanitised into a SQL query. Inject a UNION SELECT payload inside the JSON, re-encode as base64, and set the forged cookie to extract the flag in three phases.