知识点
抓包看东西
WP
找到/chase/
找到/leftt/
找到/shoot/
然后是/door/
接着就是看/static/js/door.js,找到/open/。
看/static/js/open_sesame.js,找到/fight/
再看/static/js/fight.js
// Run to scramble original flag
//console.log(scramble(flag, action));
function scramble(flag, key) {
for (var i = 0; i < key.length; i++) {
let n = key.charCodeAt(i) % flag.length;
let temp = flag[i];
flag[i] = flag[n];
flag[n] = temp;
}
return flag;
}
function check_action() {
var action = document.getElementById("action").value;
var flag = ["{hey", "_boy", "aaaa", "s_im", "ck!}", "_baa", "aaaa", "pctf"];
// TODO: unscramble function
}
把flag拼一下就好了:
pctf{hey_boys_im_baaaaaaaaaack!}