Insp3ct0r
Point: 50
Category
Web Exploitation
Question
There is a website running at https://2019shell1.picoctf.com/problem/11196 (link). Try to see if you can answer its question.
Hint
How do you inspect web code on a browser? There's 3 parts
Solution
Looking in the source code, we can see a comment of the code where will show you the a part of the flag.
<!-- Html is neat. Anyways have 1/3 of the flag: picoCTF{tru3_d3 --><!doctype html>
<html>
<head>
<title>My First Website :)</title>
<link href="https://fonts.googleapis.com/css?family=Open+Sans|Roboto" rel="stylesheet">
<link rel="stylesheet" type="text/css" href="mycss.css">
<script type="application/javascript" src="myjs.js"></script>
</head>
<body>
<div class="container">
<header>
<h1>Inspect Me</h1>
</header>
<button class="tablink" onclick="openTab('tabintro', this, '#222')" id="defaultOpen">What</button>
<button class="tablink" onclick="openTab('tababout', this, '#222')">How</button>
<div id="tabintro" class="tabcontent">
<h3>What</h3>
<p>I made a website</p>
</div>
<div id="tababout" class="tabcontent">
<h3>How</h3>
<p>I used these to make this site: <br/>
HTML <br/>
CSS <br/>
JS (JavaScript)
</p>
<!-- Html is neat. Anyways have 1/3 of the flag: picoCTF{tru3_d3 -->
</div>
</div>
</body>
</html>Next, We'll check source of CSS file. We'll see another comment '/ You need CSS to make pretty pages. Here's part 2/3 of the flag: t3ct1ve_0r_ju5t /'
And finally, we'll check JS file. We'll see another comment '/ Javascript sure is neat. Anyways part 3/3 of the flag: _lucky?9df7e69a} /'
Flag
picoCTF{tru3_d3t3ct1ve_0r_ju5t_lucky?9df7e69a}
Last updated