Over The Wire – Natas 5

When we first log in, we get an error that we are not logged in.

Let’s switch over to burp again and intercept the request like we did last time.

It looks like we have a flag here that is being sent with the request called “loggedin” and it is currently set to 0.

Let’s change that to 1 to and see if that lets us in…

And it looks like that worked out!