Day-4:Christmas Blackout

https://tryhackme.com/room/adventofcyber3

Gaining Access

• Intercept the login request in burpsuite
• Now send the request to intruder
  
• set payload postion in and password and let the username be santa
  
• Now under payloads option paste the below possible passwords

  christmas
  elves!
  santa
  festive
  joy123
  myrrh!
  yuletide
  presents
  candy
  tidings
  cookie
  cookies
  biscuits!
  snowball
  snowball123
  

• Then click on start attack
• In the new Intruder window you will see cookie payload highlighted as this is Santa’s password

Flag