Just Login-Traboda-Web-CTF-Write-up

Aravind Rajesh
2 min readJun 29, 2021

CHALLENGE DESCRIPTION

Login to the website and one more thing have you heard of clientside validation using javascript??

Flag Format: inctfj{}

Before going into the challenge, let us look what is a ‘client-side validation’…

Client-side validation is an initial check and an important feature of good user experience; by catching invalid data on the client-side, the user can fix it straight away. If it gets to the server and is then rejected, a noticeable delay is caused by a round trip to the server and then back to the client-side to tell the user to fix their data.

We are given the link to login-page of a webpage. Looks like the flag have been hidden inside the webpage. But we don’t know the username and password to sign-in .

When we view the page-source… we will find the file main.js

On opening main.js, we will find some JS code. Inside the code, there we find the username and password.

JS code

On login, using the username and password, we will get our 🚩…

Challenge Flag
Traboda CyberLabs

About Traboda…

Traboda is an end-to-end cybersecurity learning platform which has more than 400+ CTF challenges spreading across various categories of Cybersecurity. Level up your skills through immersive, gamified and hands-on learning experience.

--

--

Aravind Rajesh

CSE undergrad. Learning web3 and Blockchain. Interested in both Development and Security.