Decoding, Brute-Forcing and Crafting Flask Session Cookies - "web-intro" [DefCamp CTF 2022]

[@hishameyad5675]

love your videos so much, keep going

[@_CryptoCat]

thanks mate 🥰

[@hva8055]

Great teaching sir, i learnt new techniques today sir, but I struggle to find the version softwar names and there vulnerability in every ctf's so any suggestions sir

[@_CryptoCat]

Just keep going bro, you'll learn something new each time 😊 Look for any keywords you see in a challenge e.g. in this case "Flask" and "Session" popped in the error message, then search around (hacktricks is usually a good start). Don't worry though there are many, many challenges I struggle with 😅 If you never struggle, you never learn 😉

[@hva8055]

@@_CryptoCat thanks a lot sir

[@abdullahshafique3079]

Beginner here, i was doing the exact same way but whenever i refreshed the page, it always shows me Access denied

[@abdullahshafique3079]

Ok so apparently it didnt work on microsoft edge but worked on opera browser

[@_CryptoCat]

Awww wtf 😆

[@abdullahshafique3079]

Btw thank you so much for the writeup

[@_CryptoCat]

@@abdullahshafique3079 np mate, thanks for watching! 🥰

[@darshansoni4550]

Is there any other way to find that secret key?

[@_CryptoCat]

Apart from brute force, maybe you can leak it through some errors or find hardcoded somewhere.. If you have another vuln, e.g. LFI, that would help!

[@darshansoni4550]

@@_CryptoCat I tried that template injection that {{}} thing but still didn't work maybe there is another way to solve that challenge.

[@darshansoni4550]

@@_CryptoCat nice video btw... make video on some other vulnerability of flask waiting for that

[@S2eedGH]

Great video, but can you do it with python jwt library?

[@_CryptoCat]

Thanks! Ermm I wouldn't of thought so, presumably would show you the data like jwt.io but nothing more. You could just import the flask-unsign library into a python script instead though 😊