Beijing Institute of Electronic Science and Technology - National Competition (Beginning) writeup

# Beijing Institute of Electronic Science and Technology - National Competition (Beginning) writeup

[-= blog directory=-]

• 1-Sign-in question: verification code

  By Besti

• 2-EasyWeb

  By Besti155214

• 3-Flag_in_your_hand

• 4-Picture

---

1- Sign-in question: verification code

By Besti65310

Submit your team token.

2- EasyWeb

By Besti55214

Enter the URL: http://114.116.26.217/login.php, which is a simple login interface. After clicking login, a pop-up window will display , "username or password error".

Reading the page html, you will find that in the form, the values ​​of username and password are set to "USERNAME" and "PASSWORD" respectively. So the input is not being transmitted to the background.
After entering, it is found that username has an alternative admin. Therefore, on the chrome inspection page, try to change the value of username to "admin", and leave the other two this.value blank according to the comments.

After the jump:

get the flag!

3- Flag_in_your_hand

By Besti55212 65310 65211

4-Picture

By Besti55212 55322 65310 65211