[EN] HTML

tags:Writeup Web English

FlyDragon

Step.1

In index.html, using F12 developer tools, you can discover a hidden button.

Step.2

Remove the hidden attribute then there will be a button.

After clicking the button, you will be redirected to cat.html. Looking back at the <script>, you can find another function called magic(). By checking window.location.href, you can know that this can be used to move to different pages.

Step.3

Replace cat() in onclick() with magic() or go directly to secret.html to get the first part of the flag.

Step.4

Returning to cat.html, you can see a comment in <div> and <span>, which is the second part of the flag.

Step.5

Check secret.html and enter isAdmin = true in the console to change isAdmin to true, then click the button or directly go to flag.html.

Then you get the last part of flag.

Step.6

Assemble three flag segments.