Offensive and defensive world-simple_js

The topic is clear, it
is to audit the js code

Insert picture description here
123 Give it a try It's
better to look at the source code js directly

Insert picture description here
function defines a function
and then splits tab1.
The o=tab[i-1] in front of tab2 is useless because it will be overwritten by the value of o=tab2[i] later
. . . . . . . . . . . .
tab array is not used, the parameters initially brought in did not become tab array after any use, the output value of the division, but the value tab2 array of relevant code directly overrides the value of the tab
so no matter what the input password is wrong
jiao real Kind of simple_js

Note that the fromCharCode() function name is used here
Insert picture description here
and
dechiffre("\x35\x35\x2c\x35\x36\x2c\x35\x34\x2c\x37\x39\x2c\x31\x31\x35\x2c\x36\x39\ x2c\x31\x31\x34\x2c\x31\x31\x36\x2c\x31\x30\x37\x2c\x34\x39\x2c\x35\x30")
is completely useless, and it is on the webpage, right
?
Write code directly

Insert picture description here

Insert picture description here
Add format to get flag

Notes
learning javascript

Guess you like

Origin blog.csdn.net/m0_51641607/article/details/114013516