speedrun-1

Description

a

Solution

When we visit the url we find this static page that just says hello User 2

1a

We notice there is a session cookie. PHPSESSID is generally produced using MD5.

2a

c81e728d9d4c2f636f067f89cc14862c is the MD5 hash of 2. Let's try changing the value. MD5(1) = c4ca4238a0b923820dcc509a6f75849b

3a

This gave us the flag:

4a