Web Exploitation

Insp3ct0r [50 pts]

Solution

As the title suggests towards using the Inspect element. I decided to save the whole page and search through it locally. It gives 3 files css.css [useless], mycss.css, myjs.js, and then of course a file for the HTML page. Looking through each file, in the comments was the flag.

Flag: picoCTF{tru3_d3t3ct1ve_0r_ju5t_lucky?832b0699}

where are the robots [100 pts]

Solution

The robots file is a trivial common-known file that displays what web crawlers are looking at when indexing a website. So going to this URL revealed the file/path to go-to for the flag.https://jupiter.challenges.picoctf.org/problem/36474/robots.txt

Flag: picoCTF{ca1cu1at1ng_Mach1n3s_477ce}

logon [100 pts]

Solution

At first, we are given a username and password form. Of course, I tried admin, admin and that logged in to the no flag screen. I then logged out and did a which also logged in. I realized that the form was not the challenge it was other parts of the message. I sent a fake form and found an interesting variable when requesting the /flag page.

Admin existed and was set to false. Turning that true revealed the flag.

Flag: picoCTF{th3_c0nsp1r4cy_l1v3s_d1c24fef}

dont-use-client-side [100 pts] [Not Solved]

Solution

Flag:

picobrowser [200 pts] [Not Solved]

Solution

Flag:

Client-side-again [200 pts] [Not Solved]

Solution

Flag:

Irish-Name-Repo 1 [300 pts] [Not Solved]

Solution

Flag:

Irish-Name-Repo 2 [350 pts] [Not Solved]

Solution

Flag:

Irish-Name-Repo 3 [400 pts] [Not Solved]

Solution

Flag:

JaWT Scratchpad [400 pts] [Not Solved]

Solution

Flag:

Java Script Kiddie [400 pts] [Not Solved]

Solution

Flag:

Java Script Kiddie 2 [450 pts] [Not Solved]

Solution

Flag:

PreviousCryptography NextTAMUctf 19

Last updated 3 years ago

Was this helpful?