Web Hacking CTF (Client-side HTML/JS)

Progressive levels. Find the flag for the current level and submit it. Use View Source / DevTools / Console.

Current Level: 1 / ∞ (extendable)

Level 1 – View Source

The password is hidden in the HTML source.

Hint: Right-click → View Page Source (or Ctrl+U)

Level 2 – Hidden in DOM

Something is hidden on the page.

Hint: Inspect Element / Elements tab

Level 3 – JavaScript Variable

Open the Console and look around.

Hint: Type window or look for variables

Level 4 – Base64

Decode this: RkxBR3tsZXZlbDRfYmFzZTY0X2lzX2Vhc3l9

Level 5 – Light Obfuscation

Look at the JavaScript that runs on this page.

Hint: Search the script for strings or deobfuscate simply

Level 6 – Cookie / localStorage

Check storage (Application tab → Cookies / Local Storage).