[Mission] Cookie Monster

🎯 Cookie Monster (Auth · Level 2 · +110 XP)

A web app stores the user's privilege level inside an unencrypted, unsigned cookie. Tamper with the cookie attributes to elevate privileges to administrator.

Learning & Defense Goals:

• Inspect the browser cookie storage in the sandbox frame
• Identify the plaintext role property controlling user permissions
• Modify the cookie value and reload the session to capture the admin flag

🎯 Launch Isolated Sandbox on Cyber Lab →

Community Discussion Rules: Discuss methodologies, discovery tactics, and architectural hardening. Please do not post raw flags directly. Share your production remediation code!