HackerOne CTF Write-up: A little something to get you started

The HackerOne CTF challenge “A little something to get you started” could not get much easier. Given its difficulty rating of “Trivial” I suppose this should come as no surprise. Nonetheless, the challenge introduces the importance of the powerful “View Page Source” option built into browsers.

Flag 0

The webpage that the user is initially directed to simply contains the message:

Welcome to level 0.

The source code of the webpage can be viewed by either right clicking the webpage and selecting the “View Page Source” option (shown below) or through the command + U key combination (Ctrl + U for Windows users).

The source code of the webpage reveals that there is a bit more going on behind the scenes.

<!doctype html>
<html>
<head>
<style>
body {
background-image: url("background.png");
}
</style>
</head>
<body>
<p>Welcome to level 0. Enjoy your stay.</p>
</body>
</html>

Most notably, the background image called background.png is being used as the background for the webpage and is located in the web root directory. Browsing to the background.png URL (which is http://34.74.105.127/d360948f34/background.png, in this example) reveals the flag for the challenge.

^FLAG^89918b3bf<redacted>$FLAG$

--

--

--

Programmer || Undergraduate CSE student || Free lance Editor || Developer@home ||

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

Have You Nailed Your Definition of Done (DoD) ?

How to Set Up a Chainlink Node on AWS (WIP)

Small big WTF in dynamic inventory for GCP

Hack Day 1, August 2016

Welcome to Code & Wild

How to Become a Medical Informatics Freelancer Learning Python

Kubernetes for Newbies

æternity Foundation Grant Report: Stoyan Vasilev

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Virinchi Sai

Virinchi Sai

Programmer || Undergraduate CSE student || Free lance Editor || Developer@home ||

More from Medium

How to study for exams? Maximize your learning journey

Digital Craft FINALS: Fullstack Capstone

It’s Never Been Easier to be a Teenager

FilmoraGo Pro MOD APK 6.5.4 (Unlocked)

FilmoraGo Pro MOD APK 6.5.4 (Unlocked)