Home >

Huntress CTF > Easy Challenges

Back <> Next

Remember when Missouri got into hacking!?! You gotta be fast to catch this flag!

Here we are given another webserver to spin up and play with. Visiting the webpage we are given a button to click ‘Capture The Flag’. If we take the Missouri reference as a hint, we can inspect the source code to see if we can find anything useful.

Sure enough, by viewing the source and searching ‘flag’ we find:

function ctf() {
    window.open("./capture_the_flag.html", 'Capture The Flag', 'width=400,height=100%,menu=no,toolbar=no,location=no,scrollbars=yes');
}

We can then visit the page directly by appending ‘/capture_the_flag.html’ to the end of the url. Again, if we view the source we can retrieve the flag! I hope we don’t get sued….

Back <> Next