Web Exploitation
Console Yourself

Console Yourself

🔍 Details

AttributeDetails
Challenge NameConsole Yourself
CategoryWeb Exploitation
Difficulty🟢 Easy
FlagF4H{V7RpY51bc3**********}

📝 Description

Developers sometimes leave behind hidden scripts while working on a webpage.

One can be found here (opens in a new tab)

🧩 Hints

  1. Inspect the page source and search for <script> tags.

💡 Solution

To solve this challenge:

  1. Open the link: https://ctf.fl4ghunt.tech/about (opens in a new tab)
  2. Open Developer Tools (F12 or Ctrl+Shift+I).
  3. Go to the Elements tab and search for <script> tags.
  4. One of the scripts defines a function called iDefinitelyReadThis().
  5. Run this function in the Console tab to reveal the flag:
iDefinitelyReadThis();

📚 Insights

  • Developers sometimes leave debugging functions or test scripts in production code.
  • These functions may be accessible via the browser’s JavaScript console.
  • The Elements tab in DevTools lets you inspect HTML, CSS, and <script> tags that might reveal such functions.
  • The Console tab allows you to interact with the page by calling exposed functions or logging hidden values.
  • This challenge highlights a basic form of information disclosure, reminding developers to clean up debugging artifacts before deployment.

🤔 Comments