writeups

ABCTF - 10 - Elemental - Web Exploitation

noraj (Alexandre ZANNI)
, , ,
🇬🇧

Information#

Version#

By Version Comment
noraj 1.0 Creation

CTF#

  • Name : ABCTF 2016
  • Website : http://abctf.xyz/
  • Type : Online
  • Format : Jeopardy - Student
  • CTF Time : link

Description#

Just put in the password for the flag! Link

Solution#

  1. Display source code CTRL + U
</html>



<html>
	<head>
		  <link rel="stylesheet" href="main.css">
		  <link href='https://fonts.googleapis.com/css?family=Inconsolata' rel='stylesheet' type='text/css'>
		  <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.2/jquery.min.js"></script>
		   <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/0.97.6/css/materialize.min.css">

	</head>

	<body>
		<div class="row">
			<div class="col l6 push-l3">
				<center><h3 class="white-text">Web 1</h3><br><h3 class="white-text">Simple</h3></center>
			</div>
		</div>
		<div style="margin-top: 20%" class="row">
			<div class="col l4 push-l4">
				<form action="." method="post">
		  			<h5 class="white-text">Password: </h5>
		  			<input type="password" name="password" required>
		  			<input id="submit" type="submit" value="Submit">
				</form>
			</div>
		</div>

		<div class="row">
			<div class="col l4 push-l4" id="response-wrong">
				 			</div>
		</div>


	</body>

	<!-- 7xfsnj65gsklsjsdkj -->

			  <script type="text/javascript" src="fade.js"></script>

</html>
  1. We get a string in comment that look like a hard-to-guess password 7xfsnj65gsklsjsdkj
  2. Try this password and the flag will appear
  3. ... but shortly because of the js: fade.js
$(document).ready(function(){
	$("#response").fadeOut(2000);
});
  1. Block it with NoScript or be quick!
  2. Flag: ABCTF{insp3ct3d_dat_3l3m3nt}
Share