 Hello YouTube, this is a video right up for the challenge cookie monster for ten points on TJ CTF or the most recent captured flag competition That was going on the challenge prompt is the cookie monster is not a fan of horses It gives us a link here, and this is a web challenge So if we check out this link it is an ASCII image of a horse, and it has that nice infinite scrolling So it's an infinite horse awesome This challenge is called cookie monster, right? So I would expect to be tinkering with cookies or HTTP cookies how they're storing how website is storing information on your computer Etc. So there are a lot of browser plugins that let you take a look at these. I'm on Google Chrome right now You could be on Firefox, but again the browser plugins you may want to be looking for one is called edit this cookie That's one. I know that will work on Chrome. I think Firefox has Cookie manager plus etc etc, but once it's added to Chrome you can just see it up in the top right of your browser So this cookie picture here is edit this cookie and I can see that okay They do have a flag cookie with the value TJ CTF cookies over horses And we could go ahead and submit that if we wanted to What I had done when I was tinkering with this was I wanted to try and create a get flag script But someone will have to tell me why I'm being stupid here or what is wrong Because I was not actually able to get the flag out of this I did my simple like Python scripts. I would use the request module I would create this URL as just a variable go ahead and make a request with it and I would actually just create a session I try with both a session and just a regular request where I would go ahead and get the page create a URL request to it Get the response and then I would want to see okay Do I have any cookies in this session now and I'll close at the very end just to be proper if I go ahead and run this You can see I have a cookie jar with a cookie But just the cloud fairy user ID not the flag that we saw earlier and I guess I'm curious why that is I haven't seen that act up before but again if any of you are smarter than me or can make this Like even if I just use a regular response request, sorry I Still do not get the Cookie and the flag that I'm expecting I just get the cloud for ID So interesting didn't know if any of you had a solution or knew something about that But we still get the flag with just a simple manual browser plug-in we can submit that and we're good up ten points Hey, I want to give a shout out to the people that support me on patreon. You guys are phenomenal Thank you so so much for your generous Help it's incredible to me Honestly surreal that you guys are willing to go on this journey with me just a stupid kid to generate trying to Solve imaginary problems for imaginary points for imaginary bragging rights. So that's neat Hey, $1 a month on patreon will give you a special shout out just like this at the end of every video $5 a month on patreon will give you early access to everything that release on YouTube before it is deployed made public and Hey, if you like this video and want to see more capture-the-flag write-ups video write-ups programming tutorials other stuff That I do please do like this video maybe comment if you're willing to subscribe and That really helps me out Please if you want to join the community if you want to hang out with me or do some capture-the-flags Like this with me and other cool people join our discord server link is in the description It's awesome a really great community of other ctf players hackers and programmers Hey, if you're willing to support me on patreon that would be incredible But in the meantime, I'll see you in the next video. Thanks