We are greeted with a simple login form, simply asking for a flag and see what we get? 🤪
We get.
A quick inspect on our POST request to /flag
POST
/flag
hmmmm, 1 = true; 0= false ? let's try to change auth:"0" to auth:"1"
1 = true; 0= false ?
auth:"0" to auth:"1"
BINGO
