🌐 Inspect HTML
A detailed write-up of the Web challenge 'Inspect HTML' from PicoCTF - 2022
Contents
📊 Challenge Overview
Category Details Additional Info 🏆 Event PicoGym Event Link 🔰 Category Web 🌐 💎 Points Out of 500 total ⭐ Difficulty 🟢 Easy Personal Rating: 0/10 👤 Author LT ‘syreal’ Jones Profile 🎮 Solves 71.314 solve rate 📅 Date 29-01-2025 PicoGym 🦾 Solved By mH4ck3r0n3 Team:
📝 Challenge Information
Can you get the flag?
🎯 Challenge Files & Infrastructure
Provided Files
1
Files: None
🔍 Initial Analysis
First Steps
Initially, the website appears as follows:
As the title of the page says, I inspected the source and found the flag.
🎯 Solution Path
Exploitation Steps
Exploitation
The exploit was simply based on looking at the page’s source code, so by pressing
CTRL+U
or right-clicking and selectingView Page Source
, I found the flag.
Flag capture
🛠️ Exploitation Process
Approach
The automatic exploit makes a
GET
request to the page and uses aregex
to extract the flag.
🚩 Flag Capture
Flag
Proof of Execution
🔧 Tools Used
Tool Purpose Python Exploit ChromeDevTools Web Testing
💡 Key Learnings
Skills Improved
- Binary Exploitation
- Reverse Engineering
- Web Exploitation
- Cryptography
- Forensics
- OSINT
- Miscellaneous
📊 Final Statistics
Metric | Value | Notes |
---|---|---|
Time to Solve | 00:00 | From start to flag |
Global Ranking | Challenge ranking | |
Points Earned | Team contribution |
Created: 29-01-2025 • Last Modified: 29-01-2025 *Author: mH4ck3r0n3 • Team: *