asepharyana
0de2458955
- Deleted all 14 dummy docs from DB + filesystem - Created 14 Gemastik warmup writeups + index via create_document API (DB-first) - ch1-ch12: encoding/stego/web/pwn basics - ch13: RSA small factors - ch14: RSA special integers via paper-search (GCD with paper appendix primes) - All 15 docs indexed and live at wiki.asepharyana.my.id
36 lines
876 B
Markdown
36 lines
876 B
Markdown
---
|
|
title: "Sweet Cookie — Base64 Cookie"
|
|
type: "writeup"
|
|
section: "writeups"
|
|
status: "published"
|
|
author: "asep"
|
|
tags: ["gemastik", "ctf", "warmup", "web"]
|
|
path: "writeups/gemastik-2026-warmup/ch6-sweet-cookie.md"
|
|
created_at: "2026-08-21T07:25:31.627Z"
|
|
updated_at: "2026-08-21T07:25:31.627Z"
|
|
event: "GEMASTIK 2026 Warmup"
|
|
challenge: "Sweet Cookie — Base64 Cookie"
|
|
category: "web"
|
|
points: 500
|
|
difficulty: "easy"
|
|
flag: "GEMASTIK19{c00k13_b4s3_d3c0d3}"
|
|
---
|
|
# Sweet Cookie (500 pts) — Web
|
|
|
|
**URL:** `http://15.232.89.109:8002/`
|
|
|
|
Server mengirim cookie `session`. Nilainya cuma di-encode **Base64** (JSON):
|
|
|
|
```python
|
|
import base64
|
|
|
|
# Cookie value from Set-Cookie header
|
|
cookie = "eyJ1c2V..." # nilai session cookie
|
|
decoded = base64.b64decode(cookie)
|
|
print(decoded)
|
|
# {"user": "guest", "flag": "GEMASTIK19{c00k13_b4s3_d3c0d3}"}
|
|
```
|
|
|
|
## Flag
|
|
|
|
`GEMASTIK19{c00k13_b4s3_d3c0d3}` |