Tags: console ctf js inspect cyberapocalypse2021 hackthebox css web 

Rating:

# Full writeups for this challenge avaliable on [https://github.com/evyatar9/Writeups/blob/master/CTFs/2021-CTF_HackTheBox/Cyber_Apocalypse_2021/](https://github.com/evyatar9/Writeups/blob/master/CTFs/2021-CTF_HackTheBox/Cyber_Apocalypse_2021/)

# CTF HackTheBox 2021 Cyber Apocalypse 2021 - Inspector Gadget

Category: Web, Points: 300

![info.JPG](https://github.com/evyatar9/Writeups/raw/master/CTFs/2021-CTF_HackTheBox/Cyber_Apocalypse_2021/Web-Inspector_Gadget/images/info.JPG)

# Inspector Gadget Solution

Let's start the docker and browse it:

![index.JPG](https://github.com/evyatar9/Writeups/raw/master/CTFs/2021-CTF_HackTheBox/Cyber_Apocalypse_2021/Web-Inspector_Gadget/images/index.JPG)

So we can see the start of the flag.

Let's look at the source code:

```html
HTTP/1.1 200 OK

accept-ranges: bytes

cache-control: public, max-age=0

last-modified: Mon, 19 Apr 2021 04:45:39 GMT

etag: W/"2ef-178e872c538"

content-type: text/html; charset=UTF-8

content-length: 751

Date: Tue, 20 Apr 2021 19:06:35 GMT

Connection: close

<html lang="en">
<head>
<meta charset="UTF-8">
<title>Inspector Gadget</title>
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no">
<link rel="icon" href="/static/images/favicon.png">
<link rel="stylesheet" href="/static/css/main.css">
</head>
<body>
<center><h1>CHTB{</h1></center>
<div id="container"></div>
</body>
<script src='https://cdnjs.cloudflare.com/ajax/libs/three.js/87/three.min.js'></script>
<script src='https://threejs.org/examples/js/controls/OrbitControls.js'></script>
<script src='https://cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/TweenMax.min.js'></script>
<script src="/static/js/main.js"></script>

</html>
```

We can see `````` which it seems like another part of the flag.

Let's look at the console:

![console.JPG](https://github.com/evyatar9/Writeups/raw/master/CTFs/2021-CTF_HackTheBox/Cyber_Apocalypse_2021/Web-Inspector_Gadget/images/console.JPG)

We can get the last part of the flag ```us3full_1nf0rm4tion}```, Let's try to look at the css files:

![maincss.JPG](https://github.com/evyatar9/Writeups/raw/master/CTFs/2021-CTF_HackTheBox/Cyber_Apocalypse_2021/Web-Inspector_Gadget/images/maincss.JPG)

And from main.css comments file we get another part: /* c4n_r3ve4l_ */

So we can combine the flag: ```CHTB{1nsp3ction_c4n_r3ve4l_us3full_1nf0rm4tion}```.

Original writeup (https://github.com/evyatar9/Writeups/tree/master/CTFs/2021-CTF_HackTheBox/Cyber_Apocalypse_2021/Web-Inspector_Gadget).