攻防世界-Web-新手练习区-simple js

进入场景后出现要求输入密码的界面

经测试发现无论输入什么，结果都如下图所示

右击检查，可以看到javascript代码

 

用python解析一下pass对应的字符串"70,65,85,88,32,80,65,83,83,87,79,82,68,32,72,65,72,65"

def main():
    ch = [70, 65, 85, 88, 32, 80, 65, 83, 83, 87, 79, 82, 68, 32, 72, 65, 72, 65]
    for i in ch:
        print(chr(i), end="")

得到的字符串刚好是“FAUX PASSWORD HAHA”

猜想“\x35\x35\x2c\x35\x36\x2c\x35\x34\x2c\x37\x39\x2c\x31\x31\x35\x2c\x36\x39\x2c\x31\x31\x34\x2c\x31\x31\x36\x2c\x31\x30\x37\x2c\x34\x39\x2c\x35\x30”为flag内容

先将其由16进制数转换为十进制数对应的字符，得到“55,56,54,79,115,69,114,116,107,49,50”，再将此字符串中每个数字即ASCII码对应的字符算出，从而得到“7860sErtk12”

def main():
    s1="\x35\x35\x2c\x35\x36\x2c\x35\x34\x2c\x37\x39\x2c\x31\x31\x35\x2c\x36\x39\x2c\x31\x31\x34\x2c\x31\x31\x36\x2c\x31\x30\x37\x2c\x34\x39\x2c\x35\x30"
    print(s1)
    s2=s1.split(",")
    for i in s2:
        num=int(i)
        print(chr(num),end="")

结合题目说的flag格式，flag为Cyberpeace{786OsErtk12}