Insp3ct0r Writeup PicoCTF

Introduction

This is another easy web PicoCTF challenge titled Insp3ct0r. It has the following description: Kishor Balan tipped us off that the following code may need inspection.

Like all easy challenges, this one focuses primarily on recon.

Recon

When we open the challenge, we get a website that looks very similar to one of the previous challenges named Scavenger Hunt. It has a section detailing “what” and “how”, as shown in the following images.

When we check the source code of the page, we find the first part of the flag:

        <!-- Html is neat. Anyways have 1/3 of the flag: picoCTF{tru3_d3 -->

So intuitively, we should check the stylesheets and JS files, as they might contain parts 2 and 3.

And indeed, the stylesheet mycss.css contains the following comment:

/* You need CSS to make pretty pages. Here's part 2/3 of the flag: t3ct1ve_0r_ju5t */

And when we check the JS file, we find the last part of the flag:

/* Javascript sure is neat. Anyways part 3/3 of the flag: _lucky?FindYourOwn} */

With that, the lab is solved.

Conclusion

This challenge is a much easier version of Scavenger Hunt. If you want a slightly more challenging version, definitely check that one out.