MongoDB

Dojo #11

drag_indicator
info
drag_indicator
inputs
drag_indicator
inspect

YOU'RE NOT ADMIN - DOJO #11

Chall

You have just discovered a tool to read user information. Unfortunately for you, several filters have been set up to prevent the extraction of admin information. Can you find a way to disclose the password of the user "admin"?

GOAL

  • Retrieve the password of the account name called "admin"

BRUTE FORCE IS NOT ALLOWED

drag_indicator
waf
INPUT
OUTPUT
drag_indicator
code
drag_indicator
result