Just Login -TRABODA-Web Exploitation-CTF write up

Snehasree S
2 min readJun 22, 2021

Here is the brief write-up of the challenge — Just Login

This challenge falls under Web Category and is of Easy Difficulty level.

The given website contains a form to login to the website, as given below.

As the name of the challenge says, we need to login to the website to obtain the flag. So we need to find the username and password to login.

In the challenge description it is mentioned about client side validation using , JavaScript. So there is something hidden in the JavaScript code that helps us to login.

So inspect the website, and we can find JavaScript file in the Sources. Going through the JavaScript code we can find that there is a condition to login. That is, only is the username is ‘admin’ and password is ‘@dm1n’ . So this is the only account that can access the flag.

As we know the username and password now, we can use it to login and hence we obtain the flag, that is given below.

So this is the flag for this challenge.

inctfj{7h15_j4v45cr1p7_w45_n07_53cur3}

Traboda is a great platform for doing CTF challenges of different difficulty levels and a very good platform for beginners to learn more concepts and ideas on different categories of CTF challenges. Easily accessible and user-friendly site and help us to sort out area of our interest.

There are different categories of Challenges such as :

  1. Android
  2. Cryptography
  3. Forensics
  4. Misc
  5. Pwn
  6. Reverse Engineering
  7. Steganography
  8. Web Exploitation

--

--