Your first hack, in 60 seconds

Every Daily Hack works the same way: read the briefing, look at the evidence, type the answer. Try it here first - no XP, no pressure.

Mission briefing

Developers sometimes leave notes in a page's source code that visitors never see. This login page ships one. Read the source below and find the staff password.

Investigate

<form action="/login" method="post">
  <input name="user" placeholder="Username">
  <input name="pass" type="password" placeholder="Password">
  <!-- TODO: remove before launch - staff password is "sunrise" -->
  <button>Sign in</button>
</form>

Your answer

Staff password

Daily Hack #148 First blood

M2F14M3 Solved by

The tenant that was not hers

Web & API Security Difficulty ~3 min +10 XP

Mission briefing

Situation A stranger signed in to Maya's Brieflane account The hack Read who issued the token, not who it names Goal Give the tenant ID that really issued it

Investigate

Your answer

Play freely - sign up to submit your answer and earn XP.

Solved! +10 XP