AlpacaHack Logo

Tag: Authentication Bypass

Sign InSign Up

Authentication Bypass

No description is available for this tag.

Updated May 3, 2026
Authentication Bypass Challenges
Xmas Login
hiikunz

hiikunz

Web
375 solves
I wanna be the Admin
tchen

tchen

Web
296 solves
🍪
minaminao

minaminao

Web
Beginner
183 solves
Stateless Auth
tchen

tchen

Web
174 solves
Another Login Challenge
tchen

tchen

Web
135 solves
One More Login Challenge
tchen

tchen

Web
129 solves
ding-dong-ting-ping

yoshiking

Crypto
10 solves

🍪

SECCON CTF 13 決勝観戦CTF
183 solves
WebBeginner

by

minaminao

minaminao

ある条件を満たすとフラグが得られるようです

import Fastify from "fastify";
import fastifyCookie from "@fastify/cookie";

const fastify = Fastify();
fastify.register(fastifyCookie);

fastify.get("/", async (req, reply) => {
  reply.setCookie('admin', 'false', { path: '/', httpOnly: true });
  if (req.cookies.admin === "true")
    reply.header("X-Flag", process.env.FLAG);
  return "can you get the flag?";
});

fastify.listen({ port: process.env.PORT, host: "0.0.0.0" });

*完全なソースコードは以下からダウンロード可能です。

cookie.tar.gz
descriptionsolveswriteups