wpi admin 3 Writeup

Solved by : thewhiteh4t

• We now have access to admin panel and we have to change grades of our friend
• challenge states that we need to add grades for 4 semesters
• grades are uploaded using a json file
• on inspecting the page source we can see a link for an example json file

• by adding two more semesters and changing production to true we can upload grades successfully, here is the json I used :

    {
        "configName": "Example",
        "timezone": "EST",
        "production": true,
        "studentData": [
          {
            "name": "Alexo O",
            "email": "alexo@uupeye.edu",
            "id": 123456,
            "major": "Computer Science",
            "class": 2023,
            "workerStatus": false,
            "grades": [
              {
                "year": 2019,
                "semester": "fall",
                "semesterGPA": 4.00,
                "courses": [
                  {
                    "name": "Calculus 1",
                    "code": "MA1021",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Introduction to Program Design",
                    "code": "CS1101",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Elements of Writing",
                    "code": "WR1010",
                    "points": 3,
                    "grade": "A"
                  }, {
                    "name": "Calculus 2",
                    "code": "MA1022",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Accelerated Object-Oriented Design Concepts",
                    "code": "CS2103",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Writing about Science and Technology",
                    "code": "WR1011",
                    "points": 3,
                    "grade": "A"
                  }
                ]
              },
              {
                "year": 2019,
                "semester": "spring",
                "semesterGPA": 4.00,
                "courses": [
                  {
                    "name": "Calculus 3",
                    "code": "MA1023",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Calculus 4",
                    "code": "MA1024",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Systems Programming Concepts",
                    "code": "CS2303",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Algorithms",
                    "code": "CS2223",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "General Physics-mechanics",
                    "code": "PH1110",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "General Physics-electricity and Magnetism",
                    "code": "PH1120",
                    "points": 3,
                    "grade": "A"
                  }
                ]
              },
              {
                "year": 2020,
                "semester": "spring",
                "semesterGPA": 4.00,
                "courses": [
                  {
                    "name": "Calculus 3",
                    "code": "MA1023",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Calculus 4",
                    "code": "MA1024",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Systems Programming Concepts",
                    "code": "CS2303",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Algorithms",
                    "code": "CS2223",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "General Physics-mechanics",
                    "code": "PH1110",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "General Physics-electricity and Magnetism",
                    "code": "PH1120",
                    "points": 3,
                    "grade": "A"
                  }
                ]
              },
              {
                "year": 2020,
                "semester": "summer",
                "semesterGPA": 4.00,
                "courses": [
                  {
                    "name": "Calculus 3",
                    "code": "MA1023",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Calculus 4",
                    "code": "MA1024",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Systems Programming Concepts",
                    "code": "CS2303",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "Algorithms",
                    "code": "CS2223",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "General Physics-mechanics",
                    "code": "PH1110",
                    "points": 3,
                    "grade": "A"
                  },
                  {
                    "name": "General Physics-electricity and Magnetism",
                    "code": "PH1120",
                    "points": 3,
                    "grade": "A"
                  }
                ]
              }
            ]
          }
        ]
      }

• after uploading it we get the flag!