Evilzone question bank web application security second question: You validated it where !?

evilzone： You validated it where!?

Note: In order to facilitate browsing, the pages have been translated!

The essence of penetration is information collection!
The essence of penetration is information collection!
The essence of penetration is information collection!

Start:

In the introduction of the topic, it seems that no important tips are given.
Interview goal ...

This kind of question is just form verification, and it does not focus on information collection.
It is a stud to get started! Randomly input some strings The

password is wrong, and there is no refresh, the first time I thought it might be JavaScript controlled interaction. F12 Look at the source code. A

line of JavaScript is found,

and the password and flag of the expanded form have been obtained. Submit ~

Pay more attention to me, don't miss a good article ~