Tags: web 

Rating:

```
It's time to enter the Grid. Figure out a way to pop an alert() to get your flag.
http://chal.ctf.b01lers.com:3006
Author: @MDirt
```

Accessing the page, we are greeted with with a "console" that basicly prints what we typed in. First thing I tried was obviously `<script>alert(1)</script>` but that did not execute the script as the HTML is only inserted into the page as text, not appended as a node (create HTML node, append in document).

So the page does not trigger the javascript, how about we trigger it
```html

```
Then I clicked on that picture object and we get an alert! Then the flag is shown on the page.

Original writeup (https://github.com/ducng99/ctf/blob/main/b01lers/web/reindeer-flotilla/README.md).