picoCTF Bookmarklet: Web exploitation

picoCTF Bookmarklet: Web exploitation

welcome to my blog i am aathil ducky, I decided to write blogs for picoCTFs, in this blog I will write micro blog for picoCTF Bookmarklet challenge.

Overview of picoCTF Bookmarklet challange

Author: Jeffery John

Description

Why search for the flag when I can make a bookmarklet to print it for me?Browse here, and find the flag!

Hints

  • A bookmarklet is a bookmark that runs JavaScript instead of loading a webpage.
  • What happens when you click a bookmarklet?
  • Web browsers have other ways to run JavaScript too.
picoCTF Bookmarklet challenge flag retrieval process

Lets go to PicoCTF Bookmarklet challange

We can approach this in multiple ways, but first, I will explain one method. After starting the picoCTF challenge instance, it provides a link. Go to that website, where you will find a JavaScript code containing encrypted text.

picoCTF Bookmarklet challenge flag retrieval process

Copy the code, then right-click and select ‘Inspect’, and run the code in the browser console.

However, for this challenge, I will use an online JavaScript compiler. Simply run the JavaScript code there, and you will get the flag.

picoCTF Bookmarklet challenge flag retrieval process

Thank you for reading this blog.”

Let me know if you need any further adjustments!


Leave a Comment

Your email address will not be published. Required fields are marked *