search

old-10 -- Javascript (CSS)

URL: https://webhacking.kr/challenge/code-1/arrow-up-right

old-10.png

Looks like we have to reach some point with O character to get the flag.

<html>
    <head><title>Challenge 10</title></head>
    <body>
        <hr style="height: 100; background: brown" />
        <table border="0" width="1800" style="background: gray"><tr><td>
			<a
				id="hackme"
				style="position: relative; left: 0; top: 0"
				onclick="this.style.left=parseInt(this.style.left,10)+1+'px';if(this.style.left=='1600px')this.href='?go='+this.style.left"
				onmouseover="this.innerHTML='yOu'"
				onmouseout="this.innerHTML='O'">O</a><br />
			<font style="position: relative; left: 1600; top: 0"color="gold">
				|<br />|<br />|<br />|<br />Goal
			</font>
		</td></tr></table>
        <hr style="height: 100; background: brown" />
    </body>
</html>

Clicking the O makes it move by 1px.

If we visit the link raw https://webhacking.kr/challenge/code-1/?go=1600pxarrow-up-right we get no hack, probably because of Referer header or something.

We can solve it via Javascript Console:

Previousold-09 -- SQLi (No Logical Operators)Nextold-11 -- RegEx Match

Last updated