[relentless96]

You just need to mach with renata and then change to the directory 3

[owasp]

You had a very simple solution, good job! I overcomplicated it, lol.

1. Register account
2. Modify session cookie so that id is 1 and username is Renata. You can figure this out by checking your own cookie or sending a simple XSS payload and get her cookie
3. Use Renata's cookie to view /chat and get flag from Dimitris' chat

[trevor69000]

Just change your rid to 3

[skalvin]

very easy challenge