Last updated 4 years ago
The cookie is signed using flask. The page says 'Time is key'.
Using the flask-unsign utility, we can recover the secret key, 'Time'. We then resign data to move the 'end' date forwards.
flask-unsign
Sending the resulting cookie gives us the flag.
flask-unsign --sign --cookie "{'end': '2020-06-13 16:59:59+0000'}" --secret 'Time'