CyberSecurity Challenge #2 [Easy]

[CureMe]

SOLUTION THREAD: https://www.mc-market.org/threads/588030/

Hello, I am here again with another cyber challenge. Following feedback from the previous challenge, this one is a lot easier. For anyone with web knowledge this should be almost an instant solve but we'll see. I want these challenges to appeal to more people so maybe easier is the way to go - it is better in my opinion if more people have fun. (The flag this time is a six letter number)

The challenge this week is to gain access to the admin account on the website. This does NOT mean attempting to fully hack the server, I only authorise you to simply use the website to gain access to the admin account on the website. If you are going to try something and think it may overly stress the server or be an attack towards the server itself instead of the website then don't. If you are unsure if you are allowed to do something, then send me a direct message on discord: CureMe#7710. I guarantee you this is easier than you think it will be.

Spoiler: Challenge

Login to the admin account on the website: http://51.89.148.191/
When you get access to the account, it will tell you the flag, message me on discord CureMe#7710 if you have the flag and I'll add you to the list of people who have completed the challenge.

Spoiler: People Who Have Completed Challenge

• Jdsgames
• hgbf
• Zyger
• Shaun
• BrianGrug
• blackwalker
• one two three
• manhattan
• Troy C
• Twiglett
  
• Fonts
• ItsFlex
• _gr1zzLY
• Elapsed
• PhotoGallery
• FerdiMC
• BigSisterOfTheUSA

Random Detail: The site name (el baren luv) is "vulernable" backwards!

 

[Jdsgames]

I got it first!

 

[Zyger]

Is there supposed to be a login field? It just says this as soon as I go to the site:

 

[Shaun]

I know this said easy but I didn't expect it to be that easy

 

[CureMe]

Is there supposed to be a login field? It just says this as soon as I go to the site:

No, there isn't a login form. [DOUBLEPOST=1587778353][/DOUBLEPOST]

I know this said easy but I didn't expect it to be that easy

Yeah, I decided to REALLY step it back after the last one only had 1 sovler.

 

[Zyger]

Got it, can you add me on discord, I have a maxed friends list so I'm unable to do it myself - Zyger#1111

 

[blackwalker]

Yeah that was pretty easy

 

[Safdar]

my non existent brain hurts

 

[croissant222]

make the second one a bug in some code and give us the source code

 

[CureMe]

make the second one a bug in some code and give us the source code

Not sure how well this would work, the website was written in java.

 

[croissant222]

Not sure how well this would work, the website was written in java.

no what i mean for challenge #3 make something else with a sneaky vulnerability hidden in the code and give us the code

 

[manhattan]

got it

 

[CureMe]

no what i mean for challenge #3 make something else with a sneaky vulnerability hidden in the code and give us the code

Maybe the 4th challenge. I'm already working on the 3rd

 

[Fonts]

Well I'm either severely other thinking this or I'm really stupid.

Probably the second one.

 

[CureMe]

Well I'm either severely other thinking this or I'm really stupid.

Probably the second one.

Probably the first one.

 

[MarcusG]

I'm still lost LMAO

 

[SSH]

PLEASE DO NOT POST THE FLAG IN THE COMMENTS - MESSAGE ME ON DISCORD FOR COMPLETION.

Hello, I am here again with another cyber challenge. Following feedback from the previous challenge, this one is a lot easier. For anyone with web knowledge this should be almost an instant solve but we'll see. I want these challenges to appeal to more people so maybe easier is the way to go - it is better in my opinion if more people have fun. (The flag this time is a six letter number)

The challenge this week is to gain access to the admin account on the website. This does NOT mean attempting to fully hack the server, I only authorise you to simply use the website to gain access to the admin account on the website. If you are going to try something and think it may overly stress the server or be an attack towards the server itself instead of the website then don't. If you are unsure if you are allowed to do something, then send me a direct message on discord: CureMe#7710. I guarantee you this is easier than you think it will be.

Spoiler: Challenge

Login to the admin account on the website: http://51.89.148.191/
When you get access to the account, it will tell you the flag, message me on discord CureMe#7710 if you have the flag and I'll add you to the list of people who have completed the challenge.

Spoiler: People Who Have Completed Challenge

• Jdsgames
• hgbf
• Zyger
• Shaun
• BrianGrug
• blackwalker
• one two three
• manhattan
• Troy C
• Twiglett
  
• Fonts
• ItsFlex

Random Detail: The site name (el baren luv) is "vulernable" backwards!

This is sad. I found the manager page, but can't get past it.

 

[_gr1zzLY]

darn wish you made it a bit more challenge lol solved it in less than a min ;/

 

[CureMe]

This is sad. I found the manager page, but can't get past it.

That's because that's not the challenge.[DOUBLEPOST=1587900311][/DOUBLEPOST]

darn wish you made it a bit more challenge lol solved it in less than a min ;/

I have a hard one I've been working on coming up soon.

 

[SSH]

That's because that's not the challenge.[DOUBLEPOST=1587900311][/DOUBLEPOST]
I have a hard one I've been working on coming up soon.

Oh, xD. I found the cookies but editing them didn't do anything.