# Action Notes

{% hint style="info" %}
Category: Web

Difficulty: easy
{% endhint %}

## Description

<figure><img src="https://2661951449-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPXl4YE7Y3W2ZkuPwt8SF%2Fuploads%2FrjhxvvNdgVW3ONF1u2ne%2Fimage.png?alt=media&#x26;token=d6290cab-79d5-49ef-b8aa-3a0bdbcebcae" alt=""><figcaption></figcaption></figure>

## Solve Walkthrough

* I just try to login as **admin** and luckily the password that I guess is **admin123** so I can the flag in the admin page.

<figure><img src="https://2661951449-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FPXl4YE7Y3W2ZkuPwt8SF%2Fuploads%2FkFXAxGxaVQTqLLpzEGNb%2Fimage.png?alt=media&#x26;token=49a669e5-5b68-475a-938f-51f68d1ba4a9" alt=""><figcaption></figcaption></figure>

* Try to guess common user passwords, such as:

| Username | Password     |
| -------- | ------------ |
| admin    | admin        |
| admin    | password     |
| admin    | **admin123** |
| admin    | admin1234    |

## Flag

<kbd>OSCTF{Av0id\_S1mpl3\_P4ssw0rDs}</kbd>
