TryHackMe: [Day 2] Web Exploitation Elf HR Problems

Mac Leo

3 min readMar 23, 2022

Open the static site in a new tab, here.

ANS: No answer needed

2. Register an account, and verify the cookies using the Developer Tools in your browser.

What is the name of the new cookie that was created for your account?

ANS: user-auth

EXPLANATION:

Step 1: Open the link provided, Register the Account

( eg: username,password -> john, email id: john@john.com)

Step 2: Once Registered, you will get this screen( pictures will be provided below). Right-Click on Inspect Element

Step 3: Once in Inspect Element, Go to Storage and Click on Cookies. You will get the cookies' name as well as the value.

3. What encoding type was used for the cookie value?

ANS: hexadecimal

EXPLANATION:

Step 1: Once in Storage-> Cookies, Copy the cookie value and paste it on the input box of Cyberchef ( https://gchq.github.io/CyberChef/)

Step 2: By Analysis the cookie value, we know it might be hexadecimal. To double-check, Drag the From Hex on Favourites( On Right Hand Side of the Site) to the Recipe and Bake It.

4. What object format is the data of the cookie stored in?

ANS: JSON

EXPLANATION: As you did the following steps in Question 2 ( Decode Hexadecimal to Human Readable, the values were in standard text-based format for representing structured data based on JavaScript object syntax. )

5. Manipulate the cookie and bypass the login portal.

What is the value of the administrator cookie? (username = admin)

ANS: 7b636f6d70616e793a2022546865204265737420466573746976616c20436f6d70616e79222c206973726567697374657265643a2254727565222c20757365726e616d653a2261646d696e227d

EXPLANATION:

Step 1: Copy the JSON Format Cookie, you got from Questions 3 & 4 in Cyberchef Input Box.

Step 2: Change the Username (eg. john) to admin, then Drag the To Hex on Favourites ( Delimiter = None) and Bake It.

6. What team environment is not responding?

ANS: HR

EXPLANATION:

Step 1: Copy the new hexadecimal cookie (with admin as username) ,Paste in Storage -> Cookie -> Value.

Step 2: Refresh the website, Go back to the Dashboard. You will notice the new panel appears on the screen. The Red colour indicates it's not responding.