Post

Javascript - Source

Posted
By thanguyen165 1 min read

Description

You know javascript ?

Solution

Let’s visit the site’s source code:

1

curl http://challenge01.root-me.org/web-client/ch1/

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

<html>
    <head>
        <script type="text/javascript">
        /* <![CDATA[ */
            function login(){
                pass=prompt("Entrez le mot de passe / Enter password");
                if ( pass == "123456azerty" ) {
                    alert("Mot de passe accepté, vous pouvez valider le challenge avec ce mot de passe.\nYou can validate the challenge using this password.");  }
                else {
                    alert("Mauvais mot de passe / wrong password !");
                }
            }
        /* ]]> */
        </script>
    </head>
   <body onload="login();"><link rel='stylesheet' property='stylesheet' id='s' type='text/css' href='/template/s.css' media='all' /><iframe id='iframe' src='https://www.root-me.org/?page=externe_header'></iframe>

    </body>
</html>

As you can see in the code, we have:

1

pass == "123456azerty"

They also said:

1

You can validate the challenge using this password.

The flag is:

1

123456azerty
Practice, rootme
Web Exploitation
This post is licensed under CC BY 4.0 by the author.