[Web] Http头注入

<script>
    document.getElementById('loginForm').addEventListener('submit', function(e) {
        e.preventDefault();
    
        const correctPassword = "Q1RGe2Vhc3lfYmFzZTY0fQ==";
        const enteredPassword = document.getElementById('password').value;
        const messageElement = document.getElementById('message');
        
        if (btoa(enteredPassword) === correctPassword) {
            messageElement.textContent = "Login successful! Flag: "+enteredPassword;
            messageElement.className = "message success";
        } else {
            messageElement.textContent = "Login failed! Incorrect password.";
            messageElement.className = "message error";
        }
    });
</script>

CTF{easy_base64}

Invalid User-Agent
You must use "ctf-show-brower" browser to access this page

ctf-show-brower

CTF{user_agent_inject_success}