WebDecode | PicoCTF Challenge

Category: Web Exploitation

Difficulty: Easy

Challenge description: Do you know how to use the web inspector?

Hints:

Use the web inspector on other files included by the web page.
The flag may or may not be encoded

Walkthough:

I noticed that the website has 3 HTML pages: Home, About me, and Contact.

There was nothing interesting in each page like a form or even an endpoint but there is this header in the About me page which says: "Try inspecting the page!! You might find it there", so i had to check the page's source code and it had this "notify_true='YWNhZGVteXt3ZWJfc3VjYzNzc2Z1bGx5X2QzYzBkZWRfM2NkMTQ0ZTV9' " in the section tag, which seemed like an encoded message and it indeed was.

It was a Base64 encoding format — Base64 is a binary-to-text encoding scheme that represents binary data using 64 printable ASCII characters to ensure safe transmission over text-based channels.

Finally, I decoded this message on base64decode.org and got the flag.

Note

if you're attempting this challenge, i recommend trying it on your own before reading the solution.

Follow me for more Cybersecurity writeups.

vo1dbyt3 - Medium Read writing from vo1dbyt3 on Medium. Cybersecurity Student | Web Exploitation * Penetration Testing

If you noticed any issue with the explanation or solution, please try letting me know in the comments.

Have a nice one.