Home ABCTF-2016 The Flash
Writeup
Cancel

The Flash

Challenge

Can you somehow get the flag from this website?

Solution

website with password field, comment in html, base64 decode to get password, gives flag

1
<!-- c3RvcHRoYXRqcw== -->

which is stopthatjs, entering this in password field gives the flag in the source

Flag

ABCTF{no(d3)_js_is_s3cur3_dasjkhadbkjfbjfdjbfsdajfasdl}