Your first hack, in 60 seconds

Every Daily Hack works the same way: read the briefing, look at the evidence, type the answer. Try it here first - no XP, no pressure.

Mission briefing

Developers sometimes leave notes in a page's source code that visitors never see. This login page ships one. Read the source below and find the staff password.

Investigate

<form action="/login" method="post">
  <input name="user" placeholder="Username">
  <input name="pass" type="password" placeholder="Password">
  <!-- TODO: remove before launch - staff password is "sunrise" -->
  <button>Sign in</button>
</form>

Your answer

Staff password

Daily Hack #142 First blood

Malekith Solved by

Two names, one signature

Web & API Security Difficulty ~5 min +10 XP

Mission briefing

Situation A contractor's SSO login opened an admin session The hack Decode the SAML login and check what is signed Goal Name the account the attacker logged in as

Investigate

Your answer

Play freely - sign up to submit your answer and earn XP.

Solved! +10 XP