AlpacaHack Logo

Challenges

Sign InSign Up

Rows:

CHALLENGEAUTHORS

SOLVES

(CURRENT)

Loading challenges...

Rows:

Another Login Challenge

Daily AlpacaHackTopic: LoginReleased: Mar 13, 2026

141 solves
Web
Medium

by

tchen

tchen

Login, login, and login!

Beginner Hint 1 (AI-translated)
  • In index.js, a simple login feature is implemented.

  • It appears to check that users[username] exists and that users[username].password matches the provided password.

  • It doesn’t seem possible to create your own user. Also, a user called admin is registered, but guessing that password would be impossible.

Beginner Hint 2 (AI-translated)
  • In JavaScript, users["foobar"] and users.foobar are almost equivalent. Could this be used somehow?
  • The login form alone might not allow you to send the intended data. For methods of sending data without using a browser, refer to my writeup for I wanna be the Admin.
another-login-challenge.tar.gz

Please sign in to submit the flag.

descriptionsolveswriteups