Back to Walkthroughs
Local Authority
PicoCTF Web Exploitation [Easy]Easy

Local Authority

#tutorial

Challenge Description

image

Solution and Analysis

First spawn the instance and go to the website which it provides, you will be shown a simple login page

image

Press CTRL+SHIFT+U to open developer tools, and just input any random username and password, when you fail the login you will see this in the source code

image

just visit the script.js file to get the username and password

image

Use the same credentials to login and get the flag!

image