5 min read
GaslightCTF 2026 — json_warehouse Writeup
An Elysia note-storage app keys every action on a cookie the client holds, and falls back to a hardcoded signing secret outside production. Sign a user=1000 cookie with that secret and the admin's stored flag comes straight back.
#CTF#Cybersecurity#Web