dont-use-client-side (Easy)

  • Challenge Link: https://play.picoctf.org/practice/challenge/66?category=1&difficulty=1&page=2
  • Challenge Description: Can you break into this super secure portal?

Solution

I always use the inspect element and look through everything to see if there's any secrets. Looking at the sources and the index, you can see that in the javascript, our flag is split up into parts, so by piecing them together we get our flag: picoCTF{no_clients_plz_2eb02b45}

ducs

Sources

  • N/A