DEV Community

Discussion on: Hacker101 CTF - Micro-CMS v1

Collapse
 
paul2t profile image
Paul DE TEMMERMAN

Your solution for Flag2 is not correct.
Hint: The title of a page is not escaped in the home page.
Solution: Set the title of a page to: <
And then go to the Home page. An alert will show up with this flag.

Collapse
 
caffiendkitten profile image
DaNeil C

Hi Paul, It's good to know that there is another approach to this flag. Thanks for showing me another way.

Collapse
 
v2kumar profile image
Vivek Kumar

Can you tell me how did you find this solution E.g How'd you reach to that solution

Collapse
 
paul2t profile image
Paul DE TEMMERMAN

I found it by mistake. I was trying random things and suddenly when I went on the home page, the flag popped up.
I then tried to figure out what caused this flag to appear and found that it was the title of the page. I tried different inputs to see what could make it appear, I found that '<' was the minimal thing I could do.

Thread Thread
 
v2kumar profile image
Vivek Kumar

Thanks