> For the complete documentation index, see [llms.txt](https://simon-6.gitbook.io/simoncyber/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://simon-6.gitbook.io/simoncyber/ctf-writeups/picoctf-2025/web-exploitation/cookie-monster-easy.md).

# Cookie Monster (Easy)

The title of the CTF is "Cookie Monster"... Looks like we'll be using browser cookies then!

<figure><img src="/files/cQxzMIZb08SPjRCszGAP" alt=""><figcaption></figcaption></figure>

I did a previous CTF like this before, so I knew exactly what to do. I pressed "Inspect" on the page intially at first but I saw nothing in the tabs. Then, I tried to log in (as that would how/when  cookies would usually happen)&#x20;

***

After logging in with some random password/username, I then navigated to the Storage tab, and saw the value followed by secret\_recipe. This was probably the key.

<figure><img src="/files/z884SRPqFomLMZiAQm9l" alt=""><figcaption></figcaption></figure>

I decoded it from Base-64, and there it was the flag! Probably the fastest CTF I've done.&#x20;