Contents

🌐 Inspect HTML

A detailed write-up of the Web challenge 'Inspect HTML' from PicoCTF - 2022

/images/PicoGym/PicoCTF-2022/InspectHTML/challenge_presentation.png
Challenge Presentation

📊 Challenge Overview

Category Details Additional Info
🏆 Event PicoGym Event Link
🔰 Category Web 🌐
💎 Points Out of 500 total
⭐ Difficulty 🟢 Easy Personal Rating: 0/10
👤 Author LT ‘syreal’ Jones Profile
🎮 Solves 71.314 solve rate
📅 Date 29-01-2025 PicoGym
🦾 Solved By mH4ck3r0n3 Team:

📝 Challenge Information

Can you get the flag?

🎯 Challenge Files & Infrastructure

Provided Files

1
Files: None

🔍 Initial Analysis

First Steps

Initially, the website appears as follows:

/images/PicoGym/PicoCTF-2022/InspectHTML/site_presentation.png
Site Presentation

As the title of the page says, I inspected the source and found the flag.

🎯 Solution Path

Exploitation Steps

Exploitation

The exploit was simply based on looking at the page’s source code, so by pressing CTRL+U or right-clicking and selecting View Page Source, I found the flag.

Flag capture

/images/PicoGym/PicoCTF-2022/InspectHTML/manual_flag.png
Manual Flag

🛠️ Exploitation Process

Approach

The automatic exploit makes a GET request to the page and uses a regex to extract the flag.

🚩 Flag Capture

Flag

Proof of Execution

/images/PicoGym/PicoCTF-2022/InspectHTML/automated_flag.png
Automated Flag
Screenshot of successful exploitation

🔧 Tools Used

Tool Purpose
Python Exploit
ChromeDevTools Web Testing

💡 Key Learnings

Skills Improved

  • Binary Exploitation
  • Reverse Engineering
  • Web Exploitation
  • Cryptography
  • Forensics
  • OSINT
  • Miscellaneous

📊 Final Statistics

Metric Value Notes
Time to Solve 00:00 From start to flag
Global Ranking Challenge ranking
Points Earned Team contribution

Created: 29-01-2025 • Last Modified: 29-01-2025 *Author: mH4ck3r0n3 • Team: *