93 words
1 minutes
UofTCTF 2025
WEBThis is the Web category of the ctf
Scavenger Hunt
Challenger Description :
This challenge was just "snooping"
Flag Retrieval Process:
The first part of the flag was found in the HTML source code. It was hidden within a comment.
Part 2
: i found the second in the Header
Part 3
: i found in cookies.
Part 4
: Found in robots.txt
Part 5
: Found in styles.css
Part 6
: Admin panel accessible (find in robots.txt : hidden_pannel…) after changing cookie value (guest) to admin.
Final part (6)
: Clue from previous parts: In app.min.js.
and VOILA : uoftctf{ju57_k33p_c4lm_4nd_1n5p3c7_411_7h3_4pp5_50urc3_c0d3!!}