AlpacaHack Logo

Tag: Authentication Bypass

Sign InSign Up
Authentication Bypass

No description is available for this tag.

·Updated Jun 17, 2026
Authentication Bypass Challenges

Another Login Challenge

Daily AlpacaHackTopic: LoginReleased: Mar 13, 2026

144 solves
Web

by

tchen

tchen

Login, login, and login!

Beginner Hint 1 (AI-translated)
  • In index.js, a simple login feature is implemented.

  • It appears to check that users[username] exists and that users[username].password matches the provided password.

  • It doesn’t seem possible to create your own user. Also, a user called admin is registered, but guessing that password would be impossible.

Beginner Hint 2 (AI-translated)
  • In JavaScript, users["foobar"] and users.foobar are almost equivalent. Could this be used somehow?
  • The login form alone might not allow you to send the intended data. For methods of sending data without using a browser, refer to my writeup for I wanna be the Admin.
another-login-challenge.tar.gz

Please sign in to submit the flag.

descriptionsolveswriteups