Shakti CTF 2020_WEB Exploitation

WEB Exploitation

Ador

 

 

flag: shaktictf{f1r5t_c0mpu73r_pr0gr4mm3r}

 

Biscuits

 

 

cookie: shaktictf%7Bc00k13s_m4k3_phr3n0l0gy%26m3sm3r15m_3asy%7D

flag: shaktictf{c00k13s_m4k3_phr3n0l0gy&m3sm3r15m_3asy}

 

AuthEN

 

 

$(“.c_submit”).click(function(event) {
 	event.preventDefault()
 	var email = $(“#cuser”).val();
 	var password = $(“#cpass”).val();
 	if(username == “admin” && password == String.fromCharCode(115, 104, 97, 107, 116, 105, 99, 116, 102, 123, 98, 51, 121, 48, 110, 100, 95, 112, 117, 114, 51, 95, 99, 52, 108, 99, 117, 108, 97, 116, 105, 48, 110, 115, 125)) {
 		if(document.location.href.indexOf(“?password=”) == -1) { 
 			document.location = document.location.href + “?password=” + password;
		}
 	} else {
 	$(“#cresponse”).html(“<div class=’alert alert-danger’>Wrong password sorry.</div>”);
 	}
 })

115 104 97 107 116 105 99 116 102 123 98 51 121 48 110 100 95 112 117 114 51 95 99 52 108 99 117 108 97 116 105 48 110 115 125

 

 

flag: shaktictf{b3y0nd_pur3_c4lculati0ns}