Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
The login form contains a hidden input field that is invisible in the rendered page. Inspect it with developer tools and try modifying the submitted data.
Open Developer Tools (F12) and find the hidden input field in the HTML
You can change its value before submitting the form
The server only validates that hidden input's value