HSCTF 7 - Web Challenges

HSCTF 7 event organize by HSN CS Club. There are 6 web challenges. Let’s begin with the walkthrough.

1. Blurry Eyes

It is a beginner level web challenge.

Description: “I can’t see :(”

We are provided with a link and if we browse the URL we get!

If we look at the bottom of the web page there’s a blurry text.

blurry

Let’s inspect it

There’s a span class with strange class string.

<span class="poefKuKjNPojzLDf"></span>

If we check the header there’s a stylesheet named style.css and search for the poefKuKjNPojzLDf class.

There’s our flag.

"f" "l" "a" "g" "{" "g" "l" "a" "s" "s" "e" "s" "_" "a" "r" "e" "_" "u" "s" "e" "f" "u" "l" "}"

Let’s remove double quotes and space within our flag.

[email protected]:~# echo ""f" "l" "a" "g" "{" "g" "l" "a" "s" "s" "e" "s" "_" "a" "r" "e" "_" "u" "s" "e" "f" "u" "l" "}"" | sed 's/"//g'
f l a g { g l a s s e s _ a r e _ u s e f u l }

[email protected]:~# echo "f l a g { g l a s s e s _ a r e _ u s e f u l }" | sed 's/ //g'
flag{glasses_are_useful}

flag{glasses_are_useful}

2. Inspector Gadget

If we browse the URL we’ll get this

ss

As the challenge name hinted inspected we can assume that’s it has something to do with page source code.

Let’s take a look at the page source.

We see our flag in comments.

flag{n1ce_j0b_0p3n1nG_th3_1nsp3ct0r_g4dg3t}