Recently Updated
Plot Twist
Challenge
We need to get the flag at this site. That shouldn’t be too hard.
https://www.easyctf.com/static/problems/plot-twist/index.html
Solution
Looking in the source we see this snippet:
1
2
3
4
5
6
7
8
9
10
11
[..]
<div id="stuff" style="text-align: center">
<h1>I <3 THIS SITE</h1>
<p>GIVE ME MY FLAG!!!</p>
<!-- you thought the flag would be in the comments didn't you? nice try we're better than that -->
</div>
<script type="text/javascript" src="script.js"></script>
[..]
The flag was hidden in the javascript file
1
console.log('no one would EVER think to look in the console! flag backup: easyctf{remember_to_check_everywhere}');
Flag
easyctf{remember_to_check_everywhere}