Wednesday, August 31, 2016

Web Client / Javascript Source

Link to the challenge: Javascript Source

This challenge is really similar to the first one. I wrote an article (Javascript Authentication) and if you have read it already, I highly recommend it as it will be almost identical here.
The difference here is that we don't have a form, but a pop-up that asks us for a password a soon as we load the page.
We cancel the pop-up (or enter a random password), and we have an error message.
We open the page with Google Chrome, and open the Developer Tools (Ctrl+Shift+I).
After having a quick look at the source code, we noticed that the body tag contains an onload parameter. This parameter will call the 'login()' function as soon as the page is loaded.
It seems this is what happened to us. Again, the 'login()' function seems to be a custom javascript function, so as in the previous challenge, let's check the head tag.
Here you might have a surprise but I won't spoil it for you, and will let you finish from here. It's really straight forward.

Not too much to say here if you already made the first challenge. It's even simpler than the first one actually.
Let me know if you have any question or remark about this challenge or my posts in general.
Thank you, and see you soon for another challenge

No comments:

Post a Comment