# Sessions
### Category : Web### Points : 100 (302 solves)### Author : f1rehaz4rd
## Challenge
Find the flag.
http://34.69.61.54:4777
Author: f1rehaz4rd
## Solution
Visiting the Website, we see a login page. Viewing the source of the site, a comment can be seen saying 
> remove comment later: login iroh:iroh
Using these credentials, logging in to the website, we see it is a tribute website to Iroh along with their Bio and a link to the family tree.
Those links lead to no where so I intercepted the request by Burpsuite and we see that there is a parameter :
```Cookie: sessiontoken=UlN7MG5seV9PbmVfczNzc2lvbl90b2szbn0=```Putting the value of sessiontoken in cyberchef, we see that it is a base64 encoded string and we get the flag.
`RS{0nly_One_s3ssion_tok3n}`
[Original Writeup](https://github.com/p1xxxel/ctf-writeups/tree/main/2021/RITSEC/Sessions)(https://github.com/p1xxxel/ctf-writeups/tree/main/2021/RITSEC/Sessions)