https://anthr4ce.github.io/tags/la-ctf/Recent content in La-Ctf on Anthrace | CTF WriteupsHugoen-usMon, 10 Feb 2025 00:00:00 +0000https://anthr4ce.github.io/ctf-writeups/la-ctf/web/i-spy.../Mon, 10 Feb 2025 00:00:00 +0000https://anthr4ce.github.io/ctf-writeups/la-ctf/web/i-spy.../<hr> <h2 id="challenge-description"> <strong>Challenge Description</strong> <a class="heading-link" href="#challenge-description"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>In this challenge, there is a form where we must submit tokens. The description and hints indicate that multiple tokens are hidden in different parts of the web application. The objective is to <strong>find and submit all the tokens to obtain the flag</strong>.</p> <hr> <h2 id="step-1-understand-where-to-look-for-tokens"> <strong>Step 1: Understand Where to Look for Tokens</strong> <a class="heading-link" href="#step-1-understand-where-to-look-for-tokens"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>Tokens are scattered across several common locations where hidden data may reside:</p>https://anthr4ce.github.io/ctf-writeups/la-ctf/web/lucky-flag/Mon, 10 Feb 2025 00:00:00 +0000https://anthr4ce.github.io/ctf-writeups/la-ctf/web/lucky-flag/<hr> <h2 id="challenge-description"> Challenge Description <a class="heading-link" href="#challenge-description"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>In this challenge, I was presented with a <strong>web page filled with thousands of buttons</strong>, all labeled &ldquo;flag&rdquo;.</p> <p><img src="images/flag1.png" alt="Screenshot"></p> <p>The goal was to <strong>find the correct button that reveals the flag</strong>.</p> <hr> <h2 id="step-1-inspecting-the-source-code"> Step 1: Inspecting the Source Code <a class="heading-link" href="#step-1-inspecting-the-source-code"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>Instead of clicking every single button, I looked into the <code>main.js</code> file which controls the behavior of the buttons.</p>