---
# System prepended metadata

title: BTAS Notes

---

# BTAS Notes

## FullPawn - FrontToFuture

```
services:
* SSH (22)
* HTTP (80)

Interesting pages found:
* /dashboard
* /login
* /signup

Flask Cookie identified
* Unable to unsign using rockyou.txt
No flask SSTI point identified.x

Next I belive, we need to find the signing key for the cookie. 


heyo if anyone has hints please edit and place here, im going crazy :(. How is it flagged easy if it's so blind?
```

-For decoding flask cookies and attempting to break them, check out 
`pip3 install flask-unsign`

Additionally,
There's a token head that gets set on the `/daskboard` page after having logged in, it's base64 decodable and renders into some strange characters but also contains `main GuestUser`. Hope this helps someone.

How to log in?

session:05e05a69783bf0e36a0c9c616840a71ee6d07aab97364c5716101ef4603edebe6c

## Challenge Y

```
Notes Y
```
