You can run
any JavaScript on this site using the form above. The flag is stored in a cookie. How do you steal it from the admin bot?
- With
document.cookie
you can access the cookies of the current page.
fetch()
can be used to send HTTP requests to other sites.