和前一题一样的登录界面
F12查看源码,发现前端JavaScript密码校验逻辑:
<script>
document.getElementById('loginForm').addEventListener('submit', function(e) {
e.preventDefault();
const correctPassword = "Q1RGe2Vhc3lfYmFzZTY0fQ==";
const enteredPassword = document.getElementById('password').value;
const messageElement = document.getElementById('message');
if (btoa(enteredPassword) === correctPassword) {
messageElement.textContent = "Login successful! Flag: "+enteredPassword;
messageElement.className = "message success";
} else {
messageElement.textContent = "Login failed! Incorrect password.";
messageElement.className = "message error";
}
});
</script>代码中 `btoa()` 为JavaScript原生Base64编码函数,将编码后的字符串解码:
编码字符串:Q1RGe2Vhc3lfYmFzZTY0fQ==
解码结果:CTF{easy_base64}
输入解码后的密码 CTF{easy_base64},成功登录获取 Flag
CTF{easy_base64}