Insp3ct0r

Point: 50

Category

Web Exploitation

Question

There is a website running at https://2019shell1.picoctf.com/problem/11196 (link). Try to see if you can answer its question.

Hint

How do you inspect web code on a browser? There's 3 parts

Solution

Looking in the source code, we can see a comment of the code where will show you the a part of the flag.

<!-- Html is neat. Anyways have 1/3 of the flag: picoCTF{tru3_d3 -->
<!doctype html>
<html>
  <head>
    <title>My First Website :)</title>
    <link href="https://fonts.googleapis.com/css?family=Open+Sans|Roboto" rel="stylesheet">
    <link rel="stylesheet" type="text/css" href="mycss.css">
    <script type="application/javascript" src="myjs.js"></script>
  </head>

  <body>
    <div class="container">
      <header>
    <h1>Inspect Me</h1>
      </header>

      <button class="tablink" onclick="openTab('tabintro', this, '#222')" id="defaultOpen">What</button>
      <button class="tablink" onclick="openTab('tababout', this, '#222')">How</button>

      <div id="tabintro" class="tabcontent">
    <h3>What</h3>
    <p>I made a website</p>
      </div>

      <div id="tababout" class="tabcontent">
    <h3>How</h3>
    <p>I used these to make this site: <br/>
      HTML <br/>
      CSS <br/>
      JS (JavaScript)
    </p>
    <!-- Html is neat. Anyways have 1/3 of the flag: picoCTF{tru3_d3 -->
      </div>

    </div>

  </body>
</html>

Next, We'll check source of CSS file. We'll see another comment '/ You need CSS to make pretty pages. Here's part 2/3 of the flag: t3ct1ve_0r_ju5t /'

And finally, we'll check JS file. We'll see another comment '/ Javascript sure is neat. Anyways part 3/3 of the flag: _lucky?9df7e69a} /'

Flag

picoCTF{tru3_d3t3ct1ve_0r_ju5t_lucky?9df7e69a}

Last updated