web_进阶_NaNNaNNaNNaN-Batman

一进去首先是乱码

[图片上传中…(image.png-f37e73-1584604647935-0)]

eval() 执行这个函数

eval()改成alert()获得无乱码的代码

function $()
{
   vare=document.getElementById("c").value;
   if(e.length==16)
     if(e.match(/^be0f23/)!=null)
       if(e.match(/233ac/)!=null)
         if(e.match(/e98aa$/)!=null)
           if(e.match(/c7be9/)!=null)
           {
              var t=["fl","s_a","i","e}"];
              var n=["a","_h0l","n"];
              var r=["g{","e","_0"];
              var i=["it'","_","n"];
              var s=[t,n,r,i];
              for(var o=0;o<13;++o)
              {document.write(s[o%4][0]);
                s[o%4].splice(0,1)}}}
document.write('<input id="c"><button onclick=$()>Ok</button>');
delete _

正则表达式得出 flag{it’s_a_h0le_in_0ne}
（或者在console中打入下面的代码）

 var t=["fl","s_a","i","e}"];
              var n=["a","_h0l","n"];
              var r=["g{","e","_0"];
              var i=["it'","_","n"];
              var s=[t,n,r,i];
              for(var o=0;o<13;++o)
              {document.write(s[o%4][0]);
                s[o%4].splice(0,1)}