Update dont-use-client-side.md

RemusDBD · Jun 25, 2024 · 722122a · 722122a
1 parent 5f0cb09
commit 722122a
Showing 1 changed file with 45 additions and 1 deletion.
diff --git a/2024-ctf-trainings/picoctf/dont-use-client-side.md b/2024-ctf-trainings/picoctf/dont-use-client-side.md
@@ -1 +1,45 @@
-1
+---
+title: "dont-use-client-side"
+date: 2024-06-26
+tags:
+  - Web Exploitation
+  - picoCTF 2019
+solves:
+  - 56682
+---
+
+
+view-source:https://jupiter.challenges.picoctf.org/problem/29835/
+
+```
+<script type="text/javascript">
+  function verify() {
+    checkpass = document.getElementById("pass").value;
+    split = 4;
+    if (checkpass.substring(0, split) == 'pico') {
+      if (checkpass.substring(split*6, split*7) == '723c') {
+        if (checkpass.substring(split, split*2) == 'CTF{') {
+         if (checkpass.substring(split*4, split*5) == 'ts_p') {
+          if (checkpass.substring(split*3, split*4) == 'lien') {
+            if (checkpass.substring(split*5, split*6) == 'lz_7') {
+              if (checkpass.substring(split*2, split*3) == 'no_c') {
+                if (checkpass.substring(split*7, split*8) == 'e}') {
+                  alert("Password Verified")
+                  }
+                }
+              }
+      
+            }
+          }
+        }
+      }
+    }
+    else {
+      alert("Incorrect password");
+    }
+    
+  }
+</script>
+```
+
+picoCTF{no_clients_plz_7723ce}