> For the complete documentation index, see [llms.txt](https://krjaeh0.gitbook.io/j-log/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://krjaeh0.gitbook.io/j-log/security/ctf-and-wargame/ctf-writeups/ctf_cookie01.md).

# CTF\_Cookie01

{% hint style="warning" %}
Switch to EXCALIDRAW VIEW in the MORE OPTIONS menu of this document.\
You can decompress Drawing data with the command palette: "Decompress current Excalidraw file". For more info check in plugin settings under "Saving".
{% endhint %}

## Excalidraw Data

### Text Elements

이미지 파일을 업로드 하면 파일의 명칭이 바뀌어 업로드 된다. ^VvU1OPw2

파일을 업로드 하는 과정을 proxy로 잡아 보았다. ^t3qArfp6

shellscript 파일을 업로드 하는데 성공했다. 스크립트.php.jpg 로 파일 이름 변경하고 웹 소스코드에서 업로드 가능한 파일 크기를 늘렸다. ^9oGwdEYL

클릭 해도 다른 이미지 파일과 달리 반응이 없다. ^Xz3gG6Qc

페이지에서 이미지를 선택했을 때 실행되는 함수의 형태가 주석으로 보여지고 있다.(개발자가 실수한 것 같다.) ^Tr6dgJMr

html 소스에서 이미지의 가로,세로 값을 넣으니 눌렀을 때 반응이 출력 되었다. ^jMrzWuB0

파일 이름이 바뀌어서 원하는 대로 스크립트 실행이 안된다. 파일을 저장할 때 무슨 규칙으로 파일 이름을 생성하는지 알아내야 할 것 같다. ^1rYAvQjJ

imginfo%2F17310493080.11868500.txt 를 패킷에서 지워볼까? ^x8zoAI43

흠... ^73F1NPfw

imginfo/17310493080.11868500.txt ^xl14T0bw

imginfo%2F17310507230.35050000.txt ^ynT5MZYz

파일 업로드 후 바꼈다. ^ULn3QGBV

업로드 하기 전 쿠키 값이 파일 이름으로 적용되었다. ^pBHvM2FE

쿠키 값에 내가 원하는 파일 이름을 넣어 놓으면 원하는 파일 이름으로 스크립트도 실행할 수 있지 않을까? ^MJrCLEaK

쿠키 값을 script.php.txt로 바꿨다. -> script.php 라는 파일이 되었으면 좋겠다. ^6Zb93h0m

업로드 후에 반응이 없다. ^81DT1DGf

에러가 표시 안됬다면 정상적으로 업로드는 된 것 같은데 그렇다면 스크립트를 실행할 방법은 없을까? ^Su2a9JDO

여기에 view 라는 함수의 사용법이 주석으로 적혀 있다. ^ICZ97seR

브라우저 콘솔에서 원하는 파일을 출력할 수는 있었다. view() 의 소스코드를 확인해볼 필요가 있을 것 같다. ^VjrGStLa

파일이름을 조금 바꾸면 완벽하게 실행할 수 있을 것 같다. ^mJgZ5ZMU

아니 잠깐만... 꼭 파일을 업로드할 필요가 있어? 그냥 저 함수를 실행할 때 넣는 인자를 변형하면 스크립트를 실행할 수 있지 않을까? ^IeY9dOgs

### 커맨드 입력 및 실행 결과

 실행

```
```

```
<script>
    function executeCommand() {
        const command = document.getElementById("commandInput").value;

        try {
            const result = eval(command);
            document.getElementById("output").textContent = "결과: " + result;
        } catch (error) {
            document.getElementById("output").textContent = "오류: " + error.message;
        }
    }
</script> ^A8KKswhE
```

흠... ^U361zMHY

모양은 그럴 듯 한데 ^zF3HF6lZ

실행 결과는 의도와 다르게 출력 된다. ^wqMP0IJj

tux/w3bh4ck!23$ (root 패스워드도 동일) ^wyPaziKT

/images/{files} 에 원하는 파일이 저장되어 있는지 확인할 방법이 없다... 아니 있는데 못 찾고 있는 것 같다. 어떻게 하면 좋을까 ^80YZQFmE

제대로 파일이 업로드 되지 않았음을 검증했다. 왜? ^Rcicsaxu

제대로 쿠키 값을 넣지 않았으니까 ^Sz8rnXWc

다시 해보자 ^j16QFzwY

에러가 없다. 브라우저에 파일이 있는지 검색해보자 ^bTipeOnR

못 찾겠다네... ^crkeDYkc

{% stepper %}
{% step %}

### 가능성: 파일이 제대로 업로드 안된 것인지

설명 및 조사 포인트를 여기에 적으세요.
{% endstep %}

{% step %}

### 가능성: 업로드 되었지만 검색이 막힌 것인지

설명 및 조사 포인트를 여기에 적으세요.
{% endstep %}

{% step %}

### 가능성: 별도의 찾는 방법이 있는 것인지

설명 및 조사 포인트를 여기에 적으세요.
{% endstep %}
{% endstepper %}

hint: {source\_code}.jpg 로 풀어보자 ^r9Qw2puh

***

### Embedded Files

* 2b532e5e905adb3ad9674b9f39539057c603755f: \[\[topics/assets/images/Pasted Image 20241108153458\_178.png]]
* d79ec9863e5e347f03ce96f2c0b8ab073ee5f976: \[\[topics/assets/images/Pasted Image 20241108153630\_905.png]]
* 377a3047f84a670c46447e8122a7339c2c2549eb: \[\[topics/assets/images/Pasted Image 20241108153732\_906.png]]
* 05a64a20c8efa527b51f97f2e6dd8c943c7eda93: \[\[topics/assets/images/Pasted Image 20241108153834\_910.png]]
* d3e24e5a9f61a6e6dcd1fd2f9c317c392a01e613: \[\[topics/assets/images/Pasted Image 20241108153904\_926.png]]
* a602739ffbe47c91d4207c8c032e62e960f5ab2a: \[\[topics/assets/images/Pasted Image 20241108154813\_904.png]]
* b07f9f869612f37dab152cd1d51e7cb4d235b2ea: \[\[topics/assets/images/Pasted Image 20241108155027\_433.png]]
* 802f0859e5ac4402a9d9ca3cd9bf5e7ac545e45c: \[\[topics/assets/images/Pasted Image 20241108160345\_358.png]]
* 25436cf3dd3f8693bb27d2956f20306442514154: \[\[topics/assets/images/Pasted Image 20241108160501\_913.png]]
* b286b2f78a4569994c61f167671d4948f1208b28: \[\[topics/assets/images/Pasted Image 20241108160710\_908.png]]
* 09f80756c1d9dac88e1944f6285bb401d8fa367b: \[\[topics/assets/images/Pasted Image 20241108160725\_911.png]]
* b3fdd5134f315676864c56fa85223a1fc7d0e06d: \[\[topics/assets/images/Pasted Image 20241108161406\_911.png]]
* 727e4b0539d9a4ca3b16c02575103f12ddc1443f: \[\[topics/assets/images/Pasted Image 20241108162620\_245.png]]
* d898a5b96e8de513bac09d25b0280e7f048b113a: \[\[topics/assets/images/Pasted Image 20241108163036\_503.png]]
* 5e2968872c7342469307a84f790a5ca1fc5ac5de: \[\[topics/assets/images/Pasted Image 20241108163137\_906.png]]
* 6ef9e484b2c00fcc25e3a22be7ebe19e1cd5d704: \[\[topics/assets/images/Pasted Image 20241108163634\_628.png]]
* 07ad33d0c6b08286d50ef6581a5307c853b3bcb8: \[\[topics/assets/images/Pasted Image 20241108163820\_907.png]]
* 1dbfa31b6b45e7f4e104836cf58241478dd71d53: \[\[topics/assets/images/Pasted Image 20241108171257\_293.png]]
* dc7a3bdc40b04dcb8fc88697c1a51e5db2045bce: \[\[topics/assets/images/Pasted Image 20241108172908\_904.png]]
* cff99db12ffb0636997f8963dd244e8c42ca00ac: \[\[topics/assets/images/Pasted Image 20241108174254\_258.png]]
* 726c75bf93a8b89692566e8ccec126e79f862b5b: \[\[topics/assets/images/Pasted Image 20241108174432\_933.png]]
* 9b9aab0923c23a9d3ad6135a460a8934a76e4923: \[\[topics/assets/images/Pasted Image 20241108174609\_909.png]]
* 37b94029a247d2ecb5ec752ac19b181fd2f8e215: \[\[topics/assets/images/Pasted Image 20241108174900\_447.png]]

***

### Drawing

```compressed-json
N4KAkARALgngDgUwgLgAQQQDwMYEMA2AlgCYBOuA7hADTgQBuCpAzoQPYB2KqATLZMzYBXUtiRoIACyhQ4zZAHoFAc0JRJQgEYA6bGwC2CgF7N6hbEcK4OCtptbErHALRY8RMpWdx8Q1TdIEfARcZgRmBShcZQUebTiATho6IIR9BA4oZm4AbXAwUDAi6HhxdEJ9aKR+YsYWdi40ADYAFhrIOtZOADlOMW4AdgSAVgAGJtGW4ab2iEIOYixuCFxR

5KLIQmYAEVSoBGJuADMCMNmSZbYALQANTQAxAYBNfTgARQArYgBHJ4BBSQIADMNxgAGl1sUjoR8PgAMqwYLLQQeSECKCkNgAawQAHUSOpuHx8ujMTiETAkRIURdZpi/JIOOFsmgAIyzNhwXDYNQwbis0ajWbWZRU1BCkkQTDcZwJUbDWZ8tDOIEADgS2gGCslzAx2IQAGE2Pg2KRlhjrMwuYFMmiIJpuVjlPSFkaTWaJBaOFbcDaoHaKATJIMeMS

NlIEIRlNJuC0BuydQgDvyBjwBTxUzw2pLncI4ABJYgs1A5AC6syO5HShe4HCEsLpwgWTOYxbrDclmibxAAosF0pli3kNgUScULhJhm8Bi0gQbutge90+2DRphmBQBjAhAAZNHFWCIZa+zFUMcAXxJ5clQjgxFw+0ObIGQIFcaGY1VA1mRA4WNr9b4D+bDYDiT6oCc+BnDqURQEIxYQIgCzzModrQsENYSDwmjDECPAIMMCBysMuDEJoQKkQkTQzp

oCRHECIwMfKAzYBMQJasMRx2sw7hlMOGwJiOrJXvk541IUB6lMsFRVHanQNIMgm1EwXQcL0HD9GgaZNECwxxgkYbjgsSwSLgrJ2lsuzBI+xynAg5zgRANwALIAEotK5ZlbjcUAtFA9z6BQHwDEIRwACpoTC8KImUEA0ocsy6mSeJBkSiV6uSMXIsatKSvS0YtsWSmQJy3K8vygrChwoplBK4bSsqTQJIqMo8KqrLxNq4ZJfqbqmua5DetaGT+rMD

qgbmQiusa/WeoNPp+gGqVoAMAx1cUgJRjGWktIZAhJuBqpqqqPAMXtECTQWRa5Ne4aVrg1bge2QF5d2hUAR24ZdlNvb9iNQ5jhJ4YTugU4znOC5Liua4bluu77pAh6xSebBniOYmA2OmyOUcuJGE0ADyuAAFKjPmCTODuADipADPQqq4kIBNwAjJRHqZpCnhAF5XrMt73jZz6vpMAyqnGwyssVEC/v+aDPcBoHJmgkHQd1sHwcsSGONVkUYY5xBD

Ag2AJKqOkEcCcZHKMQJiFRRw8NgoyaKquCaKML5JpxCQDE03G8bkY7FWAwkbKWoniZKSPHpzqNySpClspLszyT0fRlAKptNBMoyqucxkNeguA8BZOx7ErEF2Q5yxg7O86Lsu+Cruum7bnuFZRRSYpxTlCUwcl+LEISWnpclnexfFdr5YyzL8hyXI8rAFXrZAIpisvUoyqyJ0tcqrLDKq2jTO7UyqqMPDDMMPtdcUPU4n1HroAAxKyCAvy/drjU6L

rEPfA2WsNtpZiBkHsGRO51NrRn9GyTUkxXyn10l+a2PAqKJQOimE2rQsw51mJdQsQ5bpQirAgTCqB5avR+u9NAQNEZSS0iSDGX1ux9jSP9G6fM7wPnLqyF8b5VoJASC0AyP55iy1IYBBWYFbJQXsjBX0UAABC8xtaoSoWODAf1MgkIgNcO4jwXjvC+L8AEwJQQQnaJAI4IENbKlGNoEWOdWQJFZE0MW0xcLbzUcoXALM2T0NmBkYgijkI61USOdR

LDNGORcu5Ty3CYA+T8gFIKIVwr7ggJY7A1jUDOFse7IE8o2rTBaKqL8J0mh7UgF4nxqAQ5FAYcUfAoQoBGn0PoNQj4AAKbB5hQLEZ9G+URSBQD+DHCggJSIfReuGAJIzTzjMcijKgsw4DdMHAHEc/ENjLyKKMMcBCiibKKJLCpwcYGzi3tbfea08JUT2SJOpEdwxRwkDJZQ1RJQp0aDU1k51PnqU0jU62jiZzOLzosAuKwgQlysggQWFdpFVwkDA

N494wpPCeNsAmbA3hgjuATD4HSPiaA6YQXW0VKTjx7txDKKUQFpT7vqMe2VUSNgZJQmpc8yqLzZJVSUq9aqzALk49eSpsnsRaJqa+pJeozQftAeaADRqdkdJNaa7o/5DV9CNJadK0CCJmJKCB21UC7W/ImcuWpMyn2wTmekV18EViISQsh4Zv7spdcUb6CxmEDiyOsjY1DsbLFxvjImpNyaUxpnTBmTMWbmJoezQuozubo3MYGuYjknjOSuFiIEA

BVfA+gjBhXkd0YYBptiuWcMTb4rlsCs2eUmrmF401YwzcsJoPEriSGcMMAAalcXA9BMBvGJjuKArIjAdLCsGeNbNkbJp5qHdhAsuE8JFgIre1FhF/kmRI8uKsZFqwfFkxCASUK62IY5diAxcD5MtmLXA1FRjYBaK0OMCB2qhlwC+Bi2AHbn0EQgTQfsCB8UDuY2pYAw4PPyEDed0cubJ3jpwEMyH6ipw0mUIELQfljDauvJRJlC4tGhWXcCh7EXo

BDYTEmZMKbU1pvTRmzMyVMupFSke+oB5D14FxzKFLmW5VdcIAqM82ScoXqKgU69+XcHXgXNa51RXOG4RqPeTRnGhgYlMVku1+OGllcsZ+r9TMfxVd/X+c1/5asAZKYBvGeC8vDEa3ptjNPuz0lqLObi4znTCFwhIapVqhmc8UXB100BlkdQ9K9e7yHNnE6gahCG6EbHqZAL1v0Il+qi/siA/NOHgW4cLfSuHTbNUlDLeL4YTSKwo5XWRQygnKO4C

l1IvqtHRI8l5eJvl/KBWCqFCK5j0lWOLDk7Qe9RhBfGHhpTLRZwVIut4/kfjJQBJaxe0J0yNFQC0ci1F6LMXYtxZofFhLiWktGxkrJuS5TuyzIIy+D2DJBxW9U1U63atNJaW0mQBwuk9JqwMuRszUbzJB5AGZozIccyQ5KFZPSAYbKxtssAuyRz7LAIcsATn0eTY81qcWPmmheZ4Hc0O4c4OR1oeUSoby44Ya+QxdDql/llFOgxARqZc6SiIxC3A

wwyPWQPY14GjkCZpGwK5AA+soAYBMDRhSMEcMEcB7iaBuHCZBbGsocZZQynEPHQF8aNwgdj6AJ6srE62WekpSpSaXlVGq8nBX8laE0TUX5TotEmOfXCQId7ZNw0CTqBmrPoC9AtbVY0LPdkj/Kmzi0gHLVQCbWxu0L6viccUoLBqXORkgbGU+qDy5i3jKbP3fPwwRYdZKe6j0ocQDdUlj1mWmF7ZRwGttIMIBZpzfmwtxbS3lsrdW2t9a52NpWIu

1NmMRxBokMTHsFB7iuTgDcBAzgAAS8i/jfBaD2HfMAjDEHuKhafdPZ/NvnyOdNff7j3EkH8fQPYpjbHkXAHccI+1AixKMKQEIDcB0g2tfosimulrzDeBwnCiVm+AIgIrOFKtLCIs3nVpIsrOLqDnBAhFrBeu3HrMsPKE+i0EXC+qqAgCcMMBmDhKyEcN7PbAgE0MQMQKqMbLONgAMAcLgEFqBmKIckHFBjBmAPUvBjPhAWzgnCauvH8mnPyE4mMH

KFnNmMDPnMeL7OcKXKLg1givzpmtmrmgWkWiWmWhWlWjWnWnroJgbsJgMv3Gnv5jSpbt3IbiJmykllLI7uVDyrJtVGvO7myH7pVuGCpnpgfOfBHkZhICZm/O8l9PHj9IntHoqjqo5nhLMK5m7uauBH7qtEMBMDgnangmwg3k6k9OIglsQOyilo2hTulmNJ3jlvXuGIVnAeumVluiEQ0mgXLJUbViBJgfCqrKDs1kottslmoh1iNAdiirgGihilij

inigSkSiSmkrdsWLkhMCUvwsgjOKdCUj7KNlUtwECN9sUJtuMSEpMWEtMZEssFLvoDLvLorsrqrurprtrrrjduNjKLYm+M4lnMCSCVnGamEqcWgMMN7qmDhv7tngKAkBcZAI0rqH9u0oDqsr0u3nFIMsMrDiEBUf0tDgsODmMoSYhrHMslid3gcmjvGpjsumOLjqdCcoyUUCIdBtTkUOIdfq8vEcpMztwHpFIZhgClurCVRNMGCsRisAMCLrCmLn

oRLssAgM5E0N0HmgMGwHmlbFWh0q/kcMMM4BwB0q5NYV3NbubibvSmrKPPrlbpxuQrbkVJJj4YCn4a7mgAph7rOHYnKAGTNkGd0ZAKKu1JKlEeqtZpqinsqhNJZtEVHgqrZkquGA5qbibB1O1NmVvLmdmZkUXsasUuvAFsVkCNRC4o4otkUXmCUXljFk3n0cSS3m9G3v0Z6k0b6rSaOIvu2hIJ2tgN2r2gOkOiOmOhOlOjOmAYmjfrHEuhySukVi

mKVh+J+FLNVk2VMg0oMUqSMeiCengeejrIQXFhIMQECAgFmARLwUcJpk+swcQNgMQPQcQDwAwdgK+CxGdKsC/JplColP7FFhBoHPcqIY8pJDOZIR8ihl8s4lLHIVhtwGTsgs4lMAXkZOCseKqAqXCpRvoR2l2j2v2oOsOqOuOpOtOrOg3h3A6a4XYdKsbo4QZi4Vae4S6fbuGN4dyh6S7gEZKAXHpjNsHqppLJ1IKOJRJWfJGbNE/HEe/HHvGQno

mUnjGbHvZo4adAWVtL0rpACW1OWYKOcufDXjfGgonOKs4jhqoeFsUZFiWPlo3qeX0luZAK3nbjthBZzsifaJ2awvWTAausVh0auQ4juqIjiRgbuUeqMQotcSorcbtjlrMUdosadisZdusb8ZkhNu5kdO7HvFRGqAZMCScatmgOcQ0RtgsFtjce1ntlomqRqVqTqXqc4AafoEaSaWaRsX8TYvEKLBMN5n7qFmMOMKVdUqJcGVNYGTnN5aic0gYP9p

0lic3rqGDgSRMpuf4qSRtQssmtScjv6nSYvujuydBuYrjqyPkvGq+HEJJfdWfHshdVjNpjdWMFNvpdnEZfvJThydyT2Z5eaFgKmYKapAoUHtBczhzvyMNWtAZFmDKYLqqH2jhVFVRhAH2vQHmqyATB0hQMXIQeSpaU6XadxkxebixSTcUFPOyl4fPO6TJrxQKvxUSD7FLCpvkhESgbfIZlGbJaZvJXGV/EpXzSpTHnZmmWnjpofEMEdAxGLOxCgV

kTtGXuBBMG1IUuhZUrZd2RAMMEYATKqFTDwJgHCPItsN8MwMTJgKQJIGFECFAFiP+NAXdOUc3m5W2O2R3j9D6n5fZYue0aVmLPwgxOub0c5furoXuWNpkHCIQEYJzuvJYpkPcA9DCKKtZYjMDcsIAC7jgAH92AADk6gIADDLgAPuOAAi46gIAKOjgAOh2AA7LagIABqrgALl0l2l2AAa46gIAKFdgAtnM52oCAAoPYADANgALaPV312oCAA4LYAC

dN2gk8lAYU2dEg+dRdZdldtdDdLdbdndvd/dw9Y9G9U9s9do+wmAwyRAygXy0sVBINHQTAUA5gBAfwF9V9UAnIdoegmQuA8wTAzqXt2ipAUY8wBAi9Z9udhdbd69E9W9ZdO9fdg9o949DdM9c9woQgb9rk4Q8dZQGIQg0VKJP9O+hZvSHU9RYFNOTyfJDOApd9QpbIGYopak8hUJ+SM4R0Qi/O6hpkSQWhMKuF2BS+6A9A2wxA+YrIfahAPAzgFA

CQUAAwzkz+VMzksuYUQgFplKbh9hZNuqZupNAmxNmjrlom087lHKDu9N3FjNfK/hzN9UrNmmwlGYEqkR5uyRyZsZCRilSRylKRKZaRpuu0JlkAytqAOGqtFUWoeEJ0GRtqtZdlhyetBtRtJtZtFtVtNtdtDtTtkB51ZRsWf9zZHtzeWWvtayQF9+vejkK+a+G+W+u+++h+x+p+5+l+baEhc+lVFTvZfefaFApATwYUrk3QygTQnkfazkpARpcIRw

xAcIsu05C6t+UBTJrRsBa6QdOkamKBG5EdVWO5Ud+DuJB5msR5rTd0MITlKw6tL4dERwmgCAcYxsrIxAu07s2A7BSCzB+EVEowRprsPAuA/B4GQkkGoFYhtOkF+1kNYNeq4JoNDQ0NbIVyNBcYhRnDmFpk2wqNBz6N1T6+m+2+e+B+R+J+Z+F+6jQmvcejtKjmzFtFrF1NxjtNbpljYWK8Nj2RdjWkOkENoRrUuk4erjylsRZmClwt3jotvjHjxQ

6Z/ICNhqxDRIUspZKYgiQWYsNqteOtpRrt+TRJLlLZFCSWtRdOZD5DjCPtXeOrxQbR6zb4qon4yCWtqBu6W1ez9WUi0da1YxwS8VdVSVku0ucuCuSuKuauGuWuOuPDaimx8mdilZj2+8TmBVosvLteZVqA0JossJfuWeuEiJ3lVxvrbWUx9Vjkwjoj4jkj0jsj8jijyjqjPV2Vcb1Eb6i2IsxlfuZO41sYc1v2i1GJxAQOtobrx6QyZJcOuz0yO1

cyFJ8OVJiONJR1OO9JaOT1zJWMPymdRQzgaYv1XJsGPJELsUp9t9DAMF3AHD4YCFAKaYPAnu7EzrAux4PY2LnrhzfeUAQI3wIyRwcAmh1FsIlNhjuJDhOjTh9pNhjpIHNNnhLL0mbLKwHL3pgRvAq0zrYRzigr1LieIrgtnj4raqMlYtqRqeOjNy2gQWJs8C8YM2itWlxeKtOR4Np8d7qYNZt4dZJYaiBo9APAsuRwfwxMMuFACAO++AxMTw9Amg

pANsVwOTDlbto7jLRrpjOJJTVr5TPe3TjkvT/TgzwzozuA4zkzww0zsz8zV+kLSzdSLtNrazQVGzn5IwYV6B+z77FYnAUAcdCdRISdXnqdbS+AGdswp7ywa9SDTdgAKU2oCAA/NYAKgTldcAmImAMANdqAgAheOAAio6gIAC89gAGqPH10gL1L3oAReH2N0xcJdJcpdpeZc5cFdFeRzA3P1RhX3BBHBnt1AP3uCteX3mjv2zCf1RA/2kAFMGumhA

McAgOlcQDlfQNVeJeoDJdsCpfpfZd5eFeoN8roNsCYOsC+doC4OHO/hieKvQJkPguUMzn8lM4wuoBZyMOIsmrDBUQEaasYWym4D3BvtYHKnjiOQICy64BCAUDfBQB5otBghDtsAdJCAJAwAJAIBsDyIUu2FUtaOMXgd0tQd0UY9GMeGmN01coIeel8VctoerTCVizYeY+83EdStqUEeqo/w+PuNM8ytp4/MMdFml7MdQn4bFLOJBMXTatafFC8f8

eCfCeuSifieSfSeyeDkKcNlOU4lFPKfe3eqafcddNhJ94cDyKaAGhf7W07iy7ECSBGA7g7g9jyJXDOQ9ggZWeLNzl37af6+OQdJWz6DSAfCYDdBwhXA9jOD0DyJYBUwtD0BPALOUlozLMLkBVLlCwIHexBbcKuea/Szud/devqyHnFsnlaJuwDAMFHAVaaZvnsT3iaB7wOzPnEASwIAsSaAtCvm6SaD4SAsAVgbLtCFgvgUJqu9LLQvSGs6j9inp

wmyvc6S4ZPtcOFw76/fDEfu6d9MDNDMjNjMTNTMzNzNo/Qf0WgfaO0sU30tU0E/sUSbmMk/O7WNeniiof7EhkQAqanQDC08MX09yp4c0P2iJFEc5UjPCWpzx0bOsQmPyZVmZRqS4YXwL4aiOdDrzWsLESnKdip0SymMTWiaM1hlh8qWtmiyAgrA52XL2tNmstTPmgJRI58V+6UORDVT9alsA2ywCtmIwkZSMZGcjBRpICUYqM1GWVLJJNlGCCUz4

e8WAd5kvhDAe25VQttVTiols7iZbc0N+1/b/sm2d2eIE1FwihhFsVeFFnvCkE1I+2aJAdgDhh7A4s+3rfErO02qUCMAM7CHHOybQLtwwSOMprrw2C45Tq67VHIvi1pHI92WOAfhQ0Bqehs6jDM4mMCe7MNQm+SGgppjFiI1jw+YZfnhRVISAEgbAKmBQF7BPA24gHImhoyP480bSw8M/rjwZaX8TGrpG/k7l8JM1OWxQAuBmAdaUd+EbQ9ofwmDz

lZJUD1cSmEyFai1f+5mLxoAI1Ti0z2srZoFmDsRDB4wjiQSuUiVrncTUIvFVmyFDo4Zc8mdUXnExaKEI9W7tVsmp3/oacCB/lVZoFRIGTAqO+8L8BQIirUDUhUILzj50TqecU6adYLrGFC6zdmAgIWEDxEAZwAoAkDSLpV0AAOzagEACMg4AFeawABGrs9AADocBAAJUOAAbBcAC9nYAA6l7QHAEkBwBtAHwOAMoFQDpcy6qAHOoABDO1AIAAGew

AL01jdQAAc1qAQAJ9jqAQADGDKIwACrzddQAAujgAHEHIugAABrAApU2AAdVbbqoA0RgABjrAAPp2oBAAGU2AAODqa6uoSuYDakP8KgjYAgRII+bpvSi6QjYRCI7QMiPRHYjcR+IwkcSNJGSiqRtIhkcyLZGcieRAo4UeKMlEyj5Ryo1UQeBa4v1lgHXLrvfUfr4A+ur9QbpKGG7f0mQY3fVhyEAb+AZuGoq3FqMBGEBgRoIiroaOhHwikRqIzET

iLxEEiiRJIskaXQpHUj6RTI1kRyO5F8jBRh9UURKPJFejFRKo7buGBB4YMsGh3VAMdx3RndtK/IeIP9V5LWdnB8LVDDyjha0N2c0QyWDpAOIGVEhpkMxPzm0KKkcW+FCQIb2N6m9MA5vS3tb1t729HezvfIcByKE0oShujOnlePx6Gsr+ZjTihY1J71CUOLNcqmw1aEdCOhweLTNoAspzD2oAZcstJR/5yU/+n8Fnm42Twc9IAkwmpG1DsS9DxKL

/EJrYktSSx9Ieke9j7m2FrCHue8KJnXw472pCBjlcbqygwHFgsBXlTph2XwFdlCBtrRzggVnA6ZzoOzB4R61z6HNLB9A+QYlU6yA9geoPcHpD2h5dI4eCPJHijzUFbE7E8wpxOUjKSvMjoemAwaJT/F/iZsMgwJHII8rQ5FBEgPyFiAGA3Apg/6HsKqG2D4AKAygZQKyFIBYhsIik/4nYgvglJJYYwIEP5IMhptwsGbKDLgPmrolTBw7bEv/UsET

tHBOJGHNYL2oI4XBS7cXiuxOoMlvBHgzdihLQnoSGSkqOYbhN2guJUwLQfdiISu4hD6cskcIQLyiGIUtIIwNMBfB+SrjC4YIFGrw3Iwecdx6AcyZZOsk8BbJ9kxyc5NcnuTCaD46lGB1P7UsZpNuKoRxWKBcV3x9/cno0LOKlIuhtiKiIE0vh6ZNaj3AYQz3Z4gDMsAA1npK3OkTC081EEXiE1Ojc1oBhScYP5KczkSuOCTbYEcCOA74ewWoHcMT

CgBXBvgiAJ4PmHt6Y04QKvPJo2VsEa9bBpwlielIfyOQ9xJvOAGbwt5W8bedvB3k71j7zt4+h7D3mkPQDEwwQWIKmJgHoBsAewHwBmR8ANAcAWgRwA0M5ErRsBiZTg0maITs6QA2JVw57EILlBBSXW4Vf+pFW3HHpcCJzQvoB0uascrYDrJHiRFfTDVeCxABIHgBtg6zNARpZvtyD0iERrJQLPvqCypxkzxxJ7MIRP1gqfSHZz3b2K2yaiTAOpKw

PIcDE3H8N/ugjJyEYCBDKAqYTQN4FPkvHn8QOxQ8mgtKjlH9YORPeDnfy7HIdH+X40JqpN/G6T+EKBUVG1C9xttCk8YA6asJpS4coJwwwjtdLOnwSLpEAJCXhHcyvcnEaYOjlqB569J5W3UaAY4nvYglikX0+Jmol+n/TAZwwYGaDPBkIBIZ0M+gLDMFnpJUB6vI4Z7WbIoy/a0WJPoHQ4kBTZw9w6WY8IEYx1vO2DPzu8P8ifCQuzXFMRAEAAuC

4AFrO1AIABdVwACPNqAaeoAA9OikRAzLqxdUAgAG6bAANZ2oBAAGD2ABFcf7qAAx0d9GuV1RvSe+U/Lfkfzv5K9Nuv/OAVgLIFqAGBZ2L9Fn1wxgYm+kzh65P0AxnoSMeGGjGjdqJDuRMcA3wCgMEFj8l+e/K/k/zV6pdDBSAogXQLYFKwXbvtzPlHcgCJ3QhssNIZjjj20kahnd2kJvpGpt7DMHpnjBos1CGLQuN0BSHHy+8QIMENMyMDOQCYNw

P4FAGUDeBMGaoIQPcA+DJDpp8cx8THOx5lCDGCcplnBxqEM1EOcmT8RTyYgv8VMWcOILhEOkHSS5zrHmnBNUr1yYJCZG6XXLuk6M9MfuTuUhQFDhMgiEwCWINUQFi9/a8MtXv/SRnqdfKbgw5OjOWBP4X8b+D/F/h/x/4ACQBEArzNnL8yMsANCmRACpk0y6ZzM5mazPZmczuZLSiAi2gXye9HiO+b4KyE0A7hcAqoB4JIB3xggYQCQDgG8CMBwB

/ybTcAh0zJlHsdOywfMPcCuA8ACYRgCgAaDzSjobgcAI4N0AGAfBuguIeRKjxd5x8cmAslZvZ0uEp95QksJxOqG2bh1eJQxJ4fuXlkSB8Cx5JWVokAzllsA9EVgkCHL5NQgQmgTvgMFfIjAmg9sa2OMEWznw9Mogi2elP77WzzWHS1LHzLkXTjkJIvG9unB9jjACVIvZ9qZAJjaL/ZfZdAFUtfzv5hgn+b/L/n/yAFgCoBexeUIv7H8se80+8Q4s

njuKk5ni1lmT1sZbTuW5ZbOTnOEoBTD4ukEucXL0zSlTpkEgWtBKulRLxh/jOVq0FQloSpYEArSfzwe5ZgXEZOFxEPL2EoCDhWfJGfRKJDeUN5ZS/LMLL+WCJnsHEA+c2Rll9Sx2sVYtsZPCSiTHiQbV4qGw+IRtvi0bMJLGz6raZBQPCOUMgjjBlIDBGobNr7nhI0EcB21QyYmoSqXFTJ6APRQYqMUmKzFFi4EKqGsW2KPJ3peIBgncSeZjVz6K

VJUgzZfZGJKJftq0kHZRTVqeJOKTYISn2DySNg1pXaFcG5Z3Bx1EcF4KxzPVfBWHfKYKHHVgARKFUw9Ru0Xw/I7Vp6oOBeuOSVSpF13YfrSq+T3tFF6cV7hfA4htRPZuACVRuL4Zo1+pXS6mbTPpmMz+lbMjmVzNcg8zJVrixxTeNjnyqpVMHJVdUNfG386hG09VZAALivMJZoqLVUXIdaGrKNZc5KBXPNVVzYJbPBJTaqCKpKVod1B9VAPLyTAt

4JsQebE047xNFOvqxGavOEk1Ta1nYUpTuq3kXDk+NSDoiMDFljUqsIKw+XxJoFNYE1rWJNfcX2yORBpVk4YDZLskOSnJLktyReNzW9VskAJf3IInxUnRuEpsNMAYIlRqsc51HJoAZKEm6bm1EAVtUcEMXGLTF5iuAJYp7U2K7FMbGzZnmKT+Tyy+ScsuqC3TaSP+p6s+BmCMELU51kUlahYKXW7Vm8iUhwRuqgqpTDq6UzwVlOvU+ChI27C9amHt

UOqoMB7P6jbOkWhCwG9UmpA42dnRCxY6oOMEtkA2wyepOhONQD2WBhRSALBZQMTAmYH88es0k/qbgg6MoFVS05liqvWmpyH+PpWFnpG0CmxJYp2s7ezVajqYZwbEbhG+iBS6QIJxmSuWK0Y3xLoliS3jKmFsRpgfmi2N7F+CWHDimOPcrhBMGBJiwUlAmiiecP2EIyV5qnNeQa2DUybQ1xA8NSMDGB+4JZPE9TWCuPnJ1T5fYp2XdAC5XzvhN8hB

YAAzlnOgXTdEr15RgAAkHAAuwtwjK6gAGVbUAgAE6HAAkauAAMFpi6AALVcAAYQ53UACoa4AB2FoUagEAA/E4AFxBwADzj6XXLoABvRgusyMAAR47PQAAUgAHBrAAOD2AAE8al2c6hdEowAME1qAQAJg1s9AAJTz0KATC5YNTtp2Cj6dqAZnaztQAc6ed/O1AMLrF2S6ZdCupXaro13a79dRurnabtQAW7rd2gO3T8IIXkL0AQYkhaGMIUUK40UY

rzjGN/rxi6FU3ZMVTpp107C6jOlnezq5187BdIu1ABLql1y7FdeXUPagE13aBddhu43dHtj2267Q3Yvbr2JwaiLBxRDIHTUlHEda31MiuqQ7NjASzGVMNV8LDQA3osvuI2EDb1P4no1WQ2wbcBPO+CSAPgOIOAHvlGCZDvgsuAmPJ2Q2FDUNc0tbTjxQ2KrCeOG1aW+JTnFAfF6cinuLGhKqTQSIJYPB/zwi4QqIJ0UA+6u5rlymN72hjXEtrmwG

yOvGdMBhOWFxgMlvWzHWTgli5LdhlE5eUUrE1Z9kd3qogb8oU2lZCqZ8FTbVjU0xqj53KtapCvQDQqzmUIC5sXwLmd8jgosXAGhTaEtBWI9BZxD7HjAvMBEqoI4D8hzid9sKPfAQsBSEhBCDlNUuYLIp624Rv1wpCWOqC/DHFV9guXEFyujp94bgmAZyPbxgAUA3guAbYM5ANAIAdwPABbSTDeBZ7zmQHTbdaXQ1f9FpzpZadf1w21CeKBGhoURt

jBs1tAuGLPKbDVkxM+WzQaEvez413qUjDDU1WMNI5C1XtCB61UgdNzurjtQWNaMUj8mV82NmbfyUBIS01GajhE16TQTWhXVwJUO76cJrh2EGEdxTaTaQbDUUGECrQBiJ6tU2utbBsarfbImYNnpFZHhy5jNnL6eYmg2AZ5gkHvDvNKCVZdmWpOGAYq/czzSQ3emohWab4gFXdcHCtntbKVtsoGt1tn3PhnWC+tkOw2mBaZth7KwuNfo30TaJjnSj

4BMyMCMx5EawG/ZSxW2yqH9Li2/c/ufHE9gjVjPbZtPCMC9Xwh8DMPkXRNU9JQ0mNaMdvPhDHwD+J2cTKu/5Pb6NL2+A0ANuksbM2k1YFHpl0h6QypgOxjrwHqOg6Mw7EDViLyQEw6fVHRwpkQeRk9HWJaO/o9cLRWZbo1BrcY5ppJ2x1hFvAfzh8KC7Xynks3aQPoHwB1jS9BdTukKJrrUBAAHIPpdAASDWV1AAxI3y7AAE02oBAAME2AAADsr2

8LUAgAHNnAApB2oBedgACdH+F5AB3eqagCantTruwunqYNPGnUAZp1AJaZtMOmnT2C9056Z9N4Ks6SetrkQs65p7euye6AJQuKDULYxtCzivQum6MKAzQZzkTqbDNGnTTFp603acdNe6sF/dRM96f4X96hFfYgcSMaHEsnJFk+1Q2Fx63IJ59MFZ7m4nQ4lJAN3fL41uMm0ByXJ/wegJ8GJhLaKhxJ28etv0ZQmttHioI14rVVhGN4Avc+JR0zCh

gLzF54PNoKmxXJ8ke8L8Pkm7l086NcROAyLVyNZHJaOjGtUBMcQnRdoW8DuQqzH38aQduRFQrpG0Fer8DIm+HbRO6PMTN5qO8g/AWuEOt/JCikY1LPoMabwVJ814efIbyk6VT5OtU7fPJFUi96o9QUYAAWxyrqgEAAAzel3NFYiq9/dQABKjKDVAMiIi6AAACcACl44AANVps4ABZuwABVDqAQADu1gATTmm9lFykZXUAC7A1CMq5F1AAMqNZdAA

LQ2AAfUdQAiWe9KZlvPAvC4ViqLCDEenRYYvMXUArF9i6gC4uz0eLHAfi8JbEuSXZL8lsy4pdQAqW1LqATS7pf0sx6rd/C09hnpT3EL0MpCsMTmbfruH8zOemhfnuLOF6yzFF7y9RcsuoB6LMXGy3ZZ52cXuLvFiuqgEEsiWOdEl6S3JfLGVjlLqlqLhpe0t6WDLoVoyx2cH3cBuztBpkKPr7MT6rjnWqPPbOvYXsVoshMcwuNDBqzj4bxhfisGO

ObBfZYGzpZgFVBGA2AfwfMLODXPSqnFcq3w14bYoBGXxb+vDSEYROEbjzmbGghqHKT3m7zQgok2Rtwyom1QM2Ggu9e9hQHaNwrZ7dkYpOZG/G+Rs4jODsRDHJY7UVoOMBcaF4x9z5/aOXAmDlYHWwxrVngd5NLy4LnRhC8QeFNozKmywXEAMDhDdBnIJMbYHb0IBYg4QLQL/MjR4DOR/w7ykmZ8svDfKhZoptC6NX8mixthOO3C3ju5UE7CLWkJU

5fNIt6pE9CCioP4EsQABSHgPcDQuCJOaAJLdA60FDaAoAZ9VAPKMAAUy4AHaFt0QXUAAzY4AB+ewADJ1AAfnt2O6Xk+gOW2wEVvK3FNatqbBrdGra3dbBt424KLNtW3bb0tiK9fUzPRX09cVvM5AALN57m8k3JMelZluO35gCtpWyrdmynwPbsRr2zrZBG+2TbFtm233sEWdWRFeDEfRIoGvVSh+Hy4c6+C0NoAHWgiB86CgMPHhHxlkTfbKam0S

BveowX3lAH96B9g+ofcPpgEj7R9dr0ctDc4rjmYa3FL+laSVHf34bLrR5guOWVFjaB7rQgx663YSMmofkx20JUav3kZGYi/15noDejJ5H1K4HGbF7gAOglHpaB3CNUdqO1GiTREh685sQ48n8lurfkwa39VqI6iQa/GwA5+Xyb07afT8lKcjrzmjmPrHTY2pMlMCJAQPEHmDwh5Q8YeskxHsjzeUxbm2A6tMDclwg6QXEmcNCmlqmz5Uwl9JwUBV

X2V2D61KDiKrOqWqYlzBtg2KUVqz4lb11yUycZAG3Xdlqta7WrTlNvVBlmtD1R9YE3fsf2EtAwbKXuoEhiwOoT9kEpIKxjdDlHn9tRxlJHBOYqI297R1nCCY7tz4L6gczXYdsz7RrdDXgAysmtNSbrIS0qXNY0UrA/+nd7493YDkGg3gfaP4DcAvwtBmAzkOALLgQAUA/gJaFoHCDYDC4QT6PMEzSwhNz2n9u55VfudVUfjv9Gqh7kIMzyKF8kSm

o6M9bOKTVUwyStUBLECaPab7X5z1JapgO33vzvGS+C/bH0mwMDbieUGfFaAwXMbVElK+gOqJtl15ED8pYTYkDE3Sb5N4mJTcUQ026bcABm0zZGV7KvlifOTTvKGfWxOT/Nug9KYYN59jmUK05pemL4orWCEsHDPRA0w+wq82AaYCcAdbaYzIRwLgsQFGAIBxgji044IQuNtbq71KzdT1rVAN2FNTiIYBnEIzzXcAXEcbXOZ+M930AizsmxTapvrP

6bfaRm8zcjnz279q220hhpyf+Htt+T3bZ/rTkHbM2rcqbFfBzZNGMOZxCYDMLTCLYGnR0mjTKkGGX22nIwmuZSeY0g3G7H/E+NpBPgGQXwvTlk1hNPhfg0V/ch7F+pdVjBES7DXA4JtIPjPDhXRpNWA+nV4DteZwyB5zdQvroebnJokwLfOd4Xj5gkoyag+TUzFHIa1ja1tZ2v8ClJYOrUASoljCo1JBgg+I86QJk4tQ6fZBD5rdf+sU1EgYJ6E/

CfKBIn0T2J/E8SfJPUnxD9QeMBKOzgCVTiAyCLG0m2JUbBxZJeqH8neazX4UkwctR4c4k+HSU4rWusnZQvF2lWs4xI5OpGPccX4KI0m1Qr7x5XMLrGJNlFg5wfYQWdV4KHva2PBrU+rrcGOcdJx+t7j8pLmz5tsrkXbBpa6BtlmYuIAL4ZW90G94j8PDBQ0EwZk3OP6dz1Lvc2dbhPeKGXqHcpE1CAkqvRYrsrUBdr1R+kT4PsOfvmy/vQGhXZJg

Gx+fFeIG77jmL3EMH4SphcIsAsA4q+NQI24o0A/hK0BnCChuTeS2TbDsKUCnjXQppCyGoDp2sjnb6VCvA/dZC3o6IthU8TueHKn06ZF/BQgsAAG69oAE923Zu/HwT8HZzOp7w72Z9M5no/pJXCzEzkqCWaL3LARP7VkuwdyH3l2ezfV41P2ZXeDmRrU4lnL8jcfiktBXzkpPu58e4BiXPs494g77yYB8AemMKE7GvfsHPDpLjJw+8hN3vn3eT19w

ecKeMu2IuSHAwrUviErg8v5yYIsKoi/pJgAru+H9eg9X3YPQN6VohLTzApOo3sXSAKGrdTmQLLJ7D0RIFBZw+5Z8bYf/ZI98myPwDwUyUqo8ybxlnSoEEYFJtAgOkxAPtMBh9h9p8wGIY5cQCxAAdey7TGzpSpUOdLZcrIHfC0EkBsBib2AXprMz+DORmAXibgRHPG+7LJv7N/Z1A8OdjAEXbcxjwMWdfC2XhbH8W4Fy49S2KdMip2woHTvu3IbL

iHO7cbVH+nb5stlO2wBe9u2c46t7O1rdzsn1/R0nyK2HchoxWQ78V2T1/WStx2lPidp7/98B+UG3vntsH198/3qeFT3Vnor1cruXdB+kLoc3cZe6wvTo3sBxC0fUVfd8Axh1fssBgAcAwowwbNE8CMBT3rx9+il4da8+5PX9y986/Cfpf7bP3aoZxtRGcRBZBEoYQD5mycxZ3M4e8LeEm2af803z5J9Ly0+BsIe1tGYZSWAbVCcnlC4CZYaV97lp

hRYfk6sq0aE2q8izkz91CcNmetfT37Xzr9196+aB+vg3sbvcBG9jewkE3t3gn1yYHPaPJ3nDK91OejHQVK1jj4TreHEXOPXwh7+RaTtO2Xb3Nx7PkiAljBRquPs9n6ftv048/ad214X9sS6VS/ticH2J6h+h313cPyOwlejtyfY7WfeOwwsr9qHq/rt4WCd9Oj1+S/Elb22ew6saeurw+7T6T9fWqHytRn2MBNahoLimoeJvQ/P2s/6AWf6NH390

C689e+vTQAb0N5D+je+fZL8E4L+JN+HjrNLwLwU9CO+Lin916EmTj0yBTGnDP4oFFRcID/jlA3wOX00w0+bXwgAhhPXwlZPzQ3y6dTcK6gPgQsBLT0hcMFFgqMOoCdyCwaCZJQ9UuNYrDyoZfFcSd8DXAg3I9cbd11NcWHEgxFMbXUfzyQpgFzmws3OS70udkHCYkTdPXZYCc8XPNz37VxQICX4RCVbSFi8Hsd7EhJUAA+DhI/MEpGjdz4VRzNci

2FB24CHiJFA58ufK4B59BAybD3hVoJiH3hC3VqXlBy1Y7U4lZwKYES00TbLQilm3Edl4dCtdtwEdO3RwW7cKtMpRvV91GrQ5tjHASDVBNQWEn8l0Auvga1VMSjg5NcAnlzfQXjZdwhcZ8Snycd7uGglhdL4FlTfQUENu1MguANFz9kTDRyDzQdwDgCBA3gKmHkRupElypdqWHz2ycn3Z/xfcxfN90PMP/JE1dVkEY7TRVJYbNgftovOMH1VT4ek1
```


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://krjaeh0.gitbook.io/j-log/security/ctf-and-wargame/ctf-writeups/ctf_cookie01.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.