STEM CTF: Cyber Challenge 2017 - Trust Issues - Web - 50 points

Mark Koskei

September 17, 2017

STEM CTF: Cyber Challenge 2017 - Trust Issues - Web - 50 points

Problem

I’d like to file a complaint about your website, it doesn’t work correctly.

Solution

Given link leads to a web page with a string that follows the flag format. The trick here is that attempting to copy-paste triggers some javascript that modifies the correct flag.

copytext = copytext.replace("G_1z", "G_lz");

FLAG: MCA{C0PYING_1z_d@ng3r0us}