Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Real 1


ghost's Avatar
0 0

I do not understand. Are we supose to try to log in to the john or the admin or john then admin or admin then john. what is the order. furtermore i have AuthID and authID in my cookie. Is this a bad thing?


Mr_Cheese's Avatar
0 1

the whole point of the mission is in the brei, on the real.php page.


ghost's Avatar
0 0

What are you talking about? all i know is that after you find that hidden directory, it gives you names, password and authID. I know you are Suppose to inject them into a cookie.

I have 2 authID's authID and AuthID. also is the cookie for username supose to be user or username. I used user because of the source code.