
TFCCTF 2023 web writeup
·
🚩 CTF/2023
[ Mctree ] admin account already exists. I guessed that I could get flag if I log in with admin account. If register id with admin" , you can see you are register in admin account. Then, login with account that you reigstered. Here is my payload. ID : admin" PW : a ● Flag TFCCTF{I_l1k3_dr4g0n_tr33s__Yuh!_1ts_my_f4v0r1t3_tr33_f0r_sur3!} [ Ducky note ] It's a web application which has admin bot. C..