Cookies

First I know that were going to be looking for cookies, so I fired up burp and went to the linked site.

Since I can see that the Cookies: name -1, I deleted the session and just put Cookie: name=0, and I got,

So now we can go to intruder and just change that cookie number until we find the flag hopefully!

Interesting we have a lot of 200 results, so to try to narrow down the results instead of going to each cookie request, I filter my length and 18 was really short compared to them, so I went back to proxy in burp and set my cookie to 18 and got the flag!!