Challenge

A password-protected vault page. Enter the correct password to see the flag.

Approach

View the page source or open DevTools. The validation logic is entirely client-side:

1
2
3
4
5
6
7
8

const PASSWORD = "v@u1t_m@st3r_9000";
const FLAG     = "boroCTF{th3_p@th_l3ss_tr@vers3d}";

document.getElementById("submit").onclick = function() {
    if (document.getElementById("pwd").value === PASSWORD) {
        alert(FLAG);
    }
};

Enter the password (or just read the flag directly from the source).

Flag

boroCTF{th3_p@th_l3ss_tr@vers3d}