DefendTheWeb Playground Challenge Intro 6

DefendTheWeb.net, previously called HackThis.co.uk, is a very famous and well-known interactive security platform where you can learn and challenge your skills.. It contains challenges from several different cybersecurity fields.

I’ve decided to have a bit of fun and try to solve every single challenge presented, from the easiest to the hardest. (although easy and hard will be different depending on your skillset and field of expertise).

As I do with any challenge website, I WILL NEVER post the flag in cleartext, as it kills the fun and thrill of finding it, however I will post my way (or ways) of getting there. This is done in respect of the website’s security and non-disclosure policy, even when it doesn’t have one ;).

Challenge Intro 6

This challenge is rated as Intro, so it might be easy to solve. The author presents us with a small description “Login as methnerd to complete the level“, an Username dropdown field and also a “[ Log in ]” button.

The dropdown button contains 4 different users. Obviously none of them are the user “methnerd set as the goal of the challenge. Using our beloved Google Chrome Dev Tolls (F12), let’s look into the code and see if we can do something about it.

This is the form code. It is a simple form. The challenge is very simple. Just go to any of the names in there, and in the dev tools change its value to “methnerd” and hit the Login button. There we have it.

See you on the next challenge.

Related posts