Tags: web 

Rating:

## find_the_flag3
- Tags: Web
- Description: The continuation of the annual Find the Flag on the web series. There is a flag hidden somewhere, broken into several parts. The task is to find all the parts and put them together.

## Solution
- When we go the website, we see standard React page placeholder. We should go to the Developer Tools and find there a JS script with the link to some strange URL.
- As we can see in description flag divided in to 3 parts. 1 part: we can find in App.js file. We can see array with route /worker11111.js.

![first-part.jpeg](https://github.com/archv1le/CTF-Write-Ups/assets/158765690/1ec4f3d4-ed9b-4c9f-a004-b2fc180a0f76)

- 2 part: we can find in file PartA.jsx. we can see that it send info to backend and gets some info. We can use Postman to send request to WebSocket.

![second-part.jpeg](https://github.com/archv1le/CTF-Write-Ups/assets/158765690/56040961-9190-4664-8bbb-9d49a87d7565)

- 3 part: we can find in PartB.jsx, as we can see in code it send request to :3001/api/code/part3/ and get some function that gives us flag. To get flag we need 2 arrays that located in /workers.js. Write script in JS and get flag.

![third-part.jpeg](https://github.com/archv1le/CTF-Write-Ups/assets/158765690/460d21ba-a4fd-488f-9a3c-28e9dfea10f9)

- The flag is:

```
VolgaCTF{P4R71_71M3_W3850CK_P4RT3_8PTRPSNI8U}
```

Original writeup (https://github.com/archv1le/CTF-Write-Ups/blob/main/VolgaCTF%202024%20Qualifier/find_the_flag3/Solution.md).