Challenge


alt text

Solution

default site with link
alt text

another page with link
alt text

search page
alt text

search doesn’t work
alt text

looking at search in burp it posts the location
alt text

it then adds a cookie with location in base64
alt text

went through most of the rooms of clue, billards worked
needed to change found_boddy to 1 on request as well
alt text

alt text

alt text

flag revealed
alt text