BUUCTF: The Hijacked Mysterious Gift

Subject address: https://buuoj.cn/challenges#%E8%A2%AB%E5%8A%AB%E6%8C%81%E7%9A%84%E7%A5%9E%E7%A7%98% E7%A4%BC%E7%89%A9

wiresharkOpen analysis

Filtered httppackets

I found that this package looks like a login, and trace this package

Looks like username and password

PS C:\Users\Administrator> php -r "echo md5('adminaadminb');"
1d240aafe21a86afc11f38a45b541a49

flag{
    
    1d240aafe21a86afc11f38a45b541a49}