Bookmarklet - PicoCTF '24 (web)

The challenge description tells us we've already received the flag. once you open the site to see a JavaScript function that essentially decrypts the flag for us then uses the alert() method to give us the flag.

STEPS TO SOLUTION.

• Inspect elements.

• go to console tab, this allows us to run JavaScript on the browser. (caution do not run JavaScript in the console if you don't understand the scripts behavior).

• but before pasting the script the challenge provided you must allow pasting. So literally type allow pasting in the console.

• paste script in the console and voila! the DOM presents our flag.

FLAG: picoCTF{p@g3_turn3r_e8b2d43b}