Post

Insp3ct0r

Kishor Balan tipped us off that the following code may need inspection: http://fickle-tempest.picoctf.net:50039

Posted Updated
By Nutavut Eakvigran
1 min read

image-1527

Open the website.

Inspect the HTML, then the linked CSS and JavaScript files. Each contains a comment with one part of the flag; join the parts in order. Comments are hidden from the rendered page but remain readable in the source.

image-1528

image-1529

The first third of the flag is picoCTF{tru3_d3.

image-1530

Adding the second part gives picoCTF{tru3_d3t3ct1ve_0r_ju5t.

image-1531

3/3 picoCTF{tru3_d3t3ct1ve_0r_ju5t_lucky?302945a7}

Done!

CyLab(picoCTF), Web Exploitation
easy web-exploitation
This post is licensed under CC BY 4.0 by the author.