# Dewaweb - ARACTF 2023 ## Description Dewaweb sedang mencari talenta terhebat! Kamu adalah seorang inspektur terkenal yang telah dikenal mampu untuk memecahkan seluruh teka-teki. Tidak ada sesuatu yang luput dari penglihatanmu, bahkan untuk sesuatu yang tidak terlihat oleh mata orang biasa. Dewaweb mencari orang sepertimu. Saat ini Dewaweb ingin menguji keahlian analisamu. Coba temukan apa yang Dewaweb sembunyikan di website ini. Buktikan bahwa kamu adalah seseorang yang pantas untuk Dewaweb! http://103.152.242.116:8417/ The English translation is like this: > Dewaweb is looking for the best talent! > > You are a well-known inspector who has been known to be able to solve all puzzles. Nothing escapes your sight, even for something that is invisible to the eyes of ordinary people. Dewaweb is looking for someone like you. > > Currently Dewaweb wants to test your analytical skills. Try to find what Dewaweb is hiding on this website. Prove that you are someone who is worthy of Dewaweb! ## Solution Flags are spread across the website. The first part of the flag can be found by inspecting the HTML element or by looking into the source code of the website. ![Part 1 of the flag](https://raw.githubusercontent.com/n1mdacybersec/CTF-Write-Up-Collection/main/2023/ARACTF/Lomba/Web%20Exploitation/Dewaweb/part1.png) The second part is in `custom.js`. ![Part 2 of the flag](https://raw.githubusercontent.com/n1mdacybersec/CTF-Write-Up-Collection/main/2023/ARACTF/Lomba/Web%20Exploitation/Dewaweb/part2.png) Third part is in `style.css` ![Part 3 of the flag](https://raw.githubusercontent.com/n1mdacybersec/CTF-Write-Up-Collection/main/2023/ARACTF/Lomba/Web%20Exploitation/Dewaweb/part3.png) The last part can be found in the response header. ![Part 4 of the flag](https://raw.githubusercontent.com/n1mdacybersec/CTF-Write-Up-Collection/main/2023/ARACTF/Lomba/Web%20Exploitation/Dewaweb/part4.png) ## Flag `ARA2023{s4nt4I_dUlu_g4k_s1h?XD}`