# [EN] HTML
###### tags:`Writeup` `Web` `English`
> [name=FlyDragon]
## Step.1
In `index.html`, using `F12` developer tools, you can discover a hidden button.
## Step.2
Remove the `hidden` attribute then there will be a button.
After clicking the button, you will be redirected to `cat.html`. Looking back at the ``<script>``, you can find another function called `magic()`. By checking `window.location.href`, you can know that this can be used to move to different pages.
## Step.3
Replace `cat()` in `onclick()` with `magic()` or go directly to `secret.html` to get the first part of the flag.

## Step.4
Returning to `cat.html`, you can see a comment in `<div>` and `<span>`, which is the second part of the flag.
## Step.5
Check `secret.html` and enter `isAdmin = true` in the console to change `isAdmin` to `true`, then click the button or directly go to `flag.html`.

Then you get the last part of flag.

## Step.6
Assemble three flag segments.

{%hackmd M1bgOPoiQbmM0JRHWaYA1g %}