[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12,"_13":14},"actionData","errors","root",{"_287":288,"_289":164},"routes/_root/_root",{"_284":-7,"_41":285,"_138":-7,"_286":-7},"routes/_root.tags.$tagCanonical+/_root",{"_37":159,"_73":160,"_161":16,"_162":163},"routes/_root.tags.$tagCanonical+/challenges.$challengeCanonical+/_root",{"_69":70,"_71":72,"_73":74},"routes/_root.tags.$tagCanonical+/challenges.$challengeCanonical+/writeups",{"_15":16,"_17":16,"_18":19,"_20":21,"_22":23},"solved",false,"hasWriteup","writeups",[24,25,26,27],"name","Xmas Login","canonicalName","xmas-login",{"_28":62,"_30":63,"_32":64,"_34":16,"_35":16,"_36":16,"_37":58,"_39":65,"_41":42,"_43":16,"_44":66},{"_28":55,"_30":56,"_32":57,"_34":16,"_35":16,"_36":16,"_37":58,"_39":59,"_41":42,"_43":16,"_44":60},{"_28":48,"_30":49,"_32":50,"_34":16,"_35":16,"_36":16,"_37":51,"_39":52,"_41":42,"_43":16,"_44":53},{"_28":29,"_30":31,"_32":33,"_34":16,"_35":16,"_36":16,"_37":38,"_39":40,"_41":42,"_43":16,"_44":45},"author",{"_20":46,"_47":-5},"writeupElementId","512e02fa","writeupId","512e02fa-329a-46d2-a1bc-235a574630e3","canEdit","canLike","likedByViewer","title","Daily AlpacaHack Week4 (2025-12-22~2025-12-28)","url","https://pan-pudding.com/contents/1767348955664.html","language","ja","isOfficial","createdAt",["D",1767349144523],"labpump","gravatarHash",{"_20":54,"_47":-5},"67277970","67277970-0dd2-4c8f-be91-076d6a46ff31","Daily AlpacaHack Week 4 (2025-12-22 〜 2025-12-27)","https://hackmd.io/@n0name-c7f/ry2b7XbVWl",["D",1767193023996],"n0name",{"_20":61,"_47":-5},"86ba2027","86ba2027-9695-4bec-8b1a-5e9bca1d528f","Writeup for Xmas Login","https://github.com/goroshirow/CTF-WrteUps/tree/main/AlpacaHack/20251225_Xmas%20Login",["D",1766685665396],"goroshirow",{"_20":67,"_47":68},"a0bc580a","a0bc580a-b844-4ca9-9b8b-e0a5ff5dad16","https://www.notion.so/kakur41-wrteup/Xmas-Login-2d4da8520c02801cb4edefccaa8d9a02?source=copy_link",["D",1766685441898],"kakur41","b38a5e77015b23df77d112279a16aaba1c929e984106792bf5505dff367d67fa","challenge",{"_20":21,"_22":23,"_78":79,"_80":81,"_82":83,"_84":85,"_86":87,"_88":89,"_90":91,"_92":93,"_94":16,"_95":-7,"_96":97,"_98":-7,"_99":-7,"_36":16,"_100":101,"_102":103,"_104":16,"_105":-7,"_106":16,"_107":-7,"_108":-7,"_109":110,"_111":-7,"_112":-7,"_113":-7,"_114":115,"_116":16,"_117":115,"_35":115,"_118":-7,"_119":120,"_121":122,"_123":124,"_125":126},"availablePages",[75,76,77],"canonicalUrl","https://alpacahack.com/tags/authentication-bypass/challenges/xmas-login","Description","Solves","Writeups","solves",402,"difficulty",20,"flagFormat","Alpaca{...}","categories",[156],"attachments",[152],"remote",{"_149":150,"_151":115},"description","🦙 < There is a vulnerability in this login system! \n🦌 < If you can login as us, we will give you a flag as a present! \n🎅 < Merry Xmas! Hohoho!\n\n

Beginner Hint

\n\n- This challenge is about SQL Injection.\n- If you are not familiar with SQL Injection, let's search the internet.\n\n

\n","descriptionJa","🦙 < このシステムには脆弱性があるパカ！ \n🦌 < 僕たちになりすましてログインできたら、フラグをプレゼントするよ！ \n🎅 < メリークリスマス！ホッホッホッ！ \n\n

初心者向けヒント

\n\n- この問題は SQL インジェクションの脆弱性を利用する問題です。\n- SQL インジェクションについて詳しく知らない場合は、インターネットで調べてみましょう。\n\n

\n","descriptionRequiresSignIn","changeLog","authors",[146],"solvedAt","solvedAtInContext","ctfChallenges",[],"tags",[140,141],"submitAsCtfChallenge","ctfCanonical","ctfEnded","point","solvesCtfChallenge","classification","easy","isMirror","ctfParticipants","ctfMode","isDailyChallenge",true,"canCheckFlagWithoutSubmission","canCreateInstance","dailyProgramCanonicalForAction","previewProgramCanonicalForAction","daily-alpacahack","dailyChallengeSlot",{"_127":128,"_109":110,"_129":130,"_131":132,"_133":134,"_135":136},"nextDailyCanonical","useful-machine","httpsProxyHostname","xmas-login.chal.alp4ca.com","program",{"_22":120,"_20":137,"_138":139},"scheduledDate",["D",1766588400000],"releaseAt",["D",1766588400000],"status","PUBLISHED","plannedTopic","SQL","Daily AlpacaHack","timeZone","Asia/Tokyo",{"_20":144,"_22":145},{"_20":142,"_22":143},"Authentication Bypass","authentication-bypass","SQL Injection","sql-injection",{"_20":147,"_47":148},"hiikunz","8c0f0a659c491490d814a033d4b13ee8a8af53e5a50f36aff3f5c7f404a4c1f8","instances",[],"canSpawn",{"_153":154,"_39":155},"fileName","xmas-login.tar.gz","https://alpacahack-prod.s3.ap-northeast-1.amazonaws.com/fe8823bd-46ec-4f76-b37e-3ae66a9f9e53/xmas-login.tar.gz",{"_20":157,"_22":158},"Web","web","Tag: Authentication Bypass","https://alpacahack.com/tags/authentication-bypass","isLoggedIn","tag",{"_20":142,"_22":143,"_90":164,"_92":165,"_96":166,"_167":168,"_169":170,"_171":172},"","Authentication Bypass は、本来必要な認証を通らずに保護された機能や情報へ到達できてしまう脆弱性です。\n\nCTF では、認証ロジック、セッション管理、入力検証の不備を利用する問題で扱われます。\n",[282],"updatedAt",["D",1781696364003],"challenges",[173,174,175,176,177,178,179],"relatedTags",[],{"_20":21,"_22":23,"_78":79,"_102":275,"_96":276,"_84":277,"_98":-7},{"_20":263,"_22":264,"_78":265,"_102":266,"_96":267,"_84":268,"_98":-7},{"_20":241,"_22":242,"_78":243,"_102":244,"_96":245,"_84":246,"_98":-7},{"_20":229,"_22":230,"_78":231,"_102":232,"_96":233,"_84":234,"_98":-7},{"_20":217,"_22":218,"_78":219,"_102":220,"_96":221,"_84":222,"_98":-7},{"_20":200,"_22":201,"_78":202,"_102":203,"_96":204,"_84":205,"_98":-7},{"_20":180,"_22":180,"_78":181,"_102":182,"_96":183,"_84":184,"_98":-7},"ding-dong-ting-ping",10,[190,191,192,193],[188],[185],{"_20":186,"_22":187},"Crypto","crypto",{"_20":189,"_47":-5},"yoshiking",{"_20":198,"_22":199},{"_20":196,"_22":197},{"_20":194,"_22":195},{"_20":142,"_22":143},"Cookie Forgery","cookie-forgery","AES","aes","ECB Mode","block-cipher-mode-ecb","One More Login Challenge","one-more-login-challenge",139,[210,211,212],[207],[206],{"_20":157,"_22":158},{"_20":208,"_47":209},"tchen","df01bfb2031cc27361ba3bf749a2c9ccc4ba83bc6fe7b059875628a9fd9d9573",{"_20":215,"_22":216},{"_20":213,"_22":214},{"_20":142,"_22":143},"NoSQL Injection","nosql-injection","MongoDB","mongodb","Another Login Challenge","another-login-challenge",144,[225,226],[224],[223],{"_20":157,"_22":158},{"_20":208,"_47":209},{"_20":227,"_22":228},{"_20":142,"_22":143},"JavaScript","javascript","Stateless Auth","stateless-auth",182,[237,238],[236],[235],{"_20":157,"_22":158},{"_20":208,"_47":209},{"_20":239,"_22":240},{"_20":142,"_22":143},"JWT","jwt","🍪","cookie",192,[254,255,256,257],[251],[247,248],{"_20":157,"_22":158},{"_20":249,"_22":250},"Beginner","beginner",{"_20":252,"_47":253},"minaminao","8923101afaa06c6be81216763685dbd0cac8ff24fbd6646250f67608d4924b02",{"_20":262,"_22":242},{"_20":260,"_22":261},{"_20":258,"_22":259},{"_20":142,"_22":143},"Fastify","fastify","HTTP","http","Cookie","I wanna be the Admin","i-wanna-be-the-admin",318,[271,272],[270],[269],{"_20":157,"_22":158},{"_20":208,"_47":209},{"_20":273,"_22":274},{"_20":142,"_22":143},"Mass Assignment","mass-assignment",[280,281],[279],[278],{"_20":157,"_22":158},{"_20":147,"_47":148},{"_20":144,"_22":145},{"_20":142,"_22":143},{"_20":283,"_47":-5},"alpakun","user","en","timeZoneAbbr","clientConfig",{"_290":291,"_292":115,"_293":294,"_295":294,"_296":297,"_298":299,"_300":16,"_301":164},"cspNonce","firebaseOptions",{"_302":303,"_304":305,"_306":307,"_308":309,"_310":311,"_312":297},"isVercel","env","production","envName","gaTrackingId","G-FJX5L5Y9FE","turnstileSiteKey","0x4AAAAAAAfYTP7SUci3nVKW","isSpawnerUnderMaintenance","spawnerMaintenanceNotice","apiKey","AIzaSyDGInmUCFubPOqJWQCw3LBB-XZGj9LX4l4","appId","1:691353492123:web:4ae258ec8c620e63f0443e","projectId","alpacahack","authDomain","alpacahack.firebaseapp.com","messagingSenderId","691353492123","measurementId"]