> For the complete documentation index, see [llms.txt](https://krjaeh0.gitbook.io/j-log/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://krjaeh0.gitbook.io/j-log/security/archive/old-6.md).
# old 6
{% code title="index.php" %}
```php
");
exit;
}
?>
Challenge 6
view-source
");
echo("ID : $decode_id
PW : $decode_pw
");
if($decode_id=="admin" && $decode_pw=="nimda"){ solve(6);
}
?>
```
{% endcode %}
The page encodes the default credentials into cookies by:
* Repeatedly base64-encoding the string 20 times.
* Replacing digits 1–8 with special characters: 1→!, 2→@, 3→$, 4→^, 5→&, 6→\*, 7→(, 8→).
To become the admin user, you need to set the cookies such that after reversing those operations on the server (replace specials back to digits, then base64-decode 20 times) you get ID = "admin" and PW = "nimda".
Python helper to produce the encoded cookie value:
{% code title="encode.py" %}
```python
import base64
def multi_base64_encode(input_string, times=20):
encoded = input_string.encode()
for _ in range(times):
encoded = base64.b64encode(encoded)
return encoded.decode()
def replace_special_characters(encoded_string):
replacements = {
"1": "!",
"2": "@",
"3": "$",
"4": "^",
"5": "&",
"6": "*",
"7": "(",
"8": ")"
}
for key, value in replacements.items():
encoded_string = encoded_string.replace(key, value)
return encoded_string
# 입력 받기
input_string = input()
# 20번 base64 인코딩하기
result = multi_base64_encode(input_string)
# 특수문자로 치환하기
result = replace_special_characters(result)
# 결과 출력
print("20번 인코딩된 결과:")
print(result)
```
{% endcode %}
{% stepper %}
{% step %}
### Encode credentials
Run the Python script and enter the credential strings:
* For the ID: enter `admin`
* For the PW: enter `nimda`
The script outputs the transformed value to use in the cookie.
{% endstep %}
{% step %}
### Set cookies
Use your browser dev tools (Application / Storage → Cookies) or an HTTP client to set the following cookies for path /challenge/web-06/:
* Cookie name: `user` → value: (output for `admin`)
* Cookie name: `password` → value: (output for `nimda`)
{% endstep %}
{% step %}
### Refresh
Refresh the page. If decoding yields ID "admin" and PW "nimda", the script calls solve(6) and you complete the challenge.
{% endstep %}
{% endstepper %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://krjaeh0.gitbook.io/j-log/security/archive/old-6.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.