# ▼▼▼Deery (Web:20pts)▼▼▼
**This writeup is written by [@kazkiti_ctf](https://twitter.com/kazkiti_ctf)**

```
deery.woodlandhighschool.xyz
```

---

**【Understanding function】**

```
GET / HTTP/1.1
Host: deery.woodlandhighschool.xyz
```

↓

```
・・・
<script>
function dontUDare(){
document.onmousedown=function(event){
while(true) {
alert("Don't poke me like that");
alert("Go away, I'm too shy...");
alert("No...");
alert("I said no...");
}
}
}
</script>
・・・
```

↓

When clicking with mouse, alert is displayed.

Although there are sign up and sign in buttons, there was no place to send a request.

---

**【I will go checking javasvript】**

↓

```
GET /components/transition.js HTTP/1.1
Host: deery.woodlandhighschool.xyz
```

↓

Although the source code was long, searching with flag caught me.

↓

```
// of course that here is the flag, what did you expect?
// timctf{Woodland_highschool_rocks_in_2018}
```

↓

`timctf{Woodland_highschool_rocks_in_2018}`