AlpacaHack Logo

Tag: Authentication Bypass

Sign InSign Up

Authentication Bypass

No description is available for this tag.

Updated May 3, 2026
Authentication Bypass Challenges
Xmas Login
hiikunz

hiikunz

Web
375 solves
I wanna be the Admin
tchen

tchen

Web
296 solves
🍪
minaminao

minaminao

Web
Beginner
183 solves
Stateless Auth
tchen

tchen

Web
174 solves
Another Login Challenge
tchen

tchen

Web
135 solves
One More Login Challenge
tchen

tchen

Web
129 solves
ding-dong-ting-ping

yoshiking

Crypto
10 solves

Another Login Challenge

Daily AlpacaHackTopic: LoginReleased: Mar 13, 2026

135 solves
Web

by

tchen

tchen

Login, login, and login!

Beginner Hint 1 (AI-translated)
  • In index.js, a simple login feature is implemented.

  • It appears to check that users[username] exists and that users[username].password matches the provided password.

  • It doesn’t seem possible to create your own user. Also, a user called admin is registered, but guessing that password would be impossible.

Beginner Hint 2 (AI-translated)
  • In JavaScript, users["foobar"] and users.foobar are almost equivalent. Could this be used somehow?
  • The login form alone might not allow you to send the intended data. For methods of sending data without using a browser, refer to my writeup for I wanna be the Admin.
another-login-challenge.tar.gz
descriptionsolveswriteups