1
<!--Part 1 of the flag: w3b_"-->

1
import { Component, Inject } from '@angular/core';
2
import { CookieService } from 'ngx-cookie-service';
3
import * as CryptoJS from 'crypto-js';
4
@Component({
5
  selector: 'app-root',
6
  template: `
7
    <p>Is it Tuesday?</p>
8
    <p *ngIf="date.getDay() === 2">Yes</p>
9
    <p *ngIf="date.getDay() !== 2">No</p>
10
  `,
11
  styles: [
12
    `
13
      p {
14
        font-family: Comic Sans MS, cursive, sans-serif;
15
        font-size: 24px;
16
        color: #ff69b4;
17
        text-shadow: 2px 2px 5px yellow;
18
        background: repeating-linear-gradient(45deg, #0ff, #f0f 10%, #ff0 20%);
19
        padding: 10px;
20
        border: 5px dashed lime;
21
        transform: rotate(-5deg);
22
        animation: wiggle 0.1s infinite alternate;
23
      }
24
      @keyframes wiggle {
25
        0% { transform: rotate(-5deg); }
26
        100% { transform: rotate(5deg); }
27
      }
28
    `
29
  ]
30
})
31
export class AppComponent {
32
  date = new Date();
33
  constructor(private cookieService: CookieService) {
34
    const key = 'flagPart2_3';
35
    const encryptedFlagPart2 = 'U2FsdGVkX1/oCOrv2BF34XQbx7f34cYJ8aA71tr8cl8=';
36
    const encryptedFlagPart3 = 'U2FsdGVkX197aFEtB5VUIBcswkWs4GiFPal6425rsTU=';
37

38
    // Decrypt and set flagPart2 in a cookie
39
    const decryptedFlagPart2 = CryptoJS.AES.decrypt(encryptedFlagPart2, key).toString(CryptoJS.enc.Utf8);
40
    this.cookieService.set('flagPart2', decryptedFlagPart2, {
41
      expires: 7,
42
      path: '/',
43
      secure: true,
44
      sameSite: 'Strict'
45
    });
46

47
    // Decrypt flagPart3 and send it in a fetch request header
48
    const decryptedFlagPart3 = CryptoJS.AES.decrypt(encryptedFlagPart3, key).toString(CryptoJS.enc.Utf8);
49
    const headers = new Headers();
50
    headers.set('flagPart3', decryptedFlagPart3);
51
    fetch('/favicon.ico', { headers });
52
  }
53
}

1
const script = document.createElement('script');
2
script.src = 'https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js';
3
script.onload = function() {
4
    const key = 'flagPart2_3';
5
    const encryptedFlagPart2 = 'U2FsdGVkX1/oCOrv2BF34XQbx7f34cYJ8aA71tr8cl8=';
6
    const encryptedFlagPart3 = 'U2FsdGVkX197aFEtB5VUIBcswkWs4GiFPal6425rsTU=';
7

8
console.log(CryptoJS.AES.decrypt(encryptedFlagPart2, key).toString(CryptoJS.enc.Utf8));
9
    console.log(CryptoJS.AES.decrypt(encryptedFlagPart3, key).toString(CryptoJS.enc.Utf8));
10
};
11
document.head.appendChild(script);

1
Encrypted flagPart2: U2FsdGVkX1/oCOrv2BF34XQbx7f34cYJ8aA71tr8cl8=
2
    Decrypted: br0w53r5_4r3_
3

4
Encrypted flagPart3: U2FsdGVkX197aFEtB5VUIBcswkWs4GiFPal6425rsTU=
5
    Decrypted: c0mpl1c473d

1
<div style="display: none;">Need to remove flagstuff. code: G1v3M3Th3Fl@g!!!!</div>

1
function App() {
2
  _s();
3
  const defaultValue = "";
4
  const [currentMessage, setMessageBoxValue] = react__WEBPACK_IMPORTED_MODULE_2___default().useState(defaultValue);
5
  const [flagGoesHere, setFlagValue] = (0,react__WEBPACK_IMPORTED_MODULE_2__.useState)("");
6
  const divRef = react__WEBPACK_IMPORTED_MODULE_2___default().useRef(null);
7
  const [lotteryNumber, setLotteryNumber] = (0,react__WEBPACK_IMPORTED_MODULE_2__.useState)(5);
8
  const [totalNumbers, setTotalNumber] = (0,react__WEBPACK_IMPORTED_MODULE_2__.useState)(100);
9
  var printFlagSetup = document.getElementById("flagstuff");
10
  console.log("Flag Will Be Checked");
11
  function addNewMessages(event) {
12
    event.preventDefault();
13
    if (currentMessage != "") {
14
      if (printFlagSetup != undefined) {
15
        printFlagSetup.setAttribute("code", "");
16
      }
17
      addNewMessageChance();
18
      divRef.current.innerHTML = "<b>[swampctfcontestant]: </b>" + currentMessage + "<br>" + divRef.current.innerHTML;
19
      addNewMessageChance();
20
      setMessageBoxValue(defaultValue);
21
    }
22
  }
23
  function addNewMessageChance() {
24
    var willTypeMessage = Math.floor(Math.random() * totalNumbers);
25
    if (willTypeMessage <= lotteryNumber) {
26
      divRef.current.innerHTML = (0,_Messages_tsx__WEBPACK_IMPORTED_MODULE_3__.returnRandomResponses)() + divRef.current.innerHTML;
27
      willTypeMessage = Math.floor(Math.random() * 100);
28
    }
29
  }
30
  function updateMessageBox(newTextBoxValue) {
31
    setMessageBoxValue(newTextBoxValue);
32
    addNewMessageChance();
33
  }
34
  async function checkCode() {
35
    if (printFlagSetup != undefined) {
36
      console.log(printFlagSetup.getAttribute("code"));
37
      if (printFlagSetup.getAttribute("code") === "G1v3M3Th3Fl@g!!!!") {
38
        const flag = await (0,_Messages_tsx__WEBPACK_IMPORTED_MODULE_3__.getFlag)();
39
        setFlagValue("[flag]: " + flag);
40
      }
41
    }
42
  }
43
  checkCode();
44
  return
45
...
46
);

1
document.getElementById("flagstuff").setAttribute("code","G1v3M3Th3Fl@g!!!!");

1
"[{""payload"":""eyJrZXkiOiJcIjMzNTc5M2Q1LTRhYzEtNDgyMy05MmM3LWZkM2I1YTZhMmEwN1wiIiwib3AiOiJQVVQiLCJ2YWx1ZSI6ImV5SmtZWFJoSWpwYkluTjNZVzF3UTFSR2V6RndaalV0WWpRMU0yUXRaRFEzTkdJME5UTjlJbDBzSW1sa0lqb2lYQ0l6TXpVM09UTmtOUzAwWVdNeExUUTRNak10T1RKak55MW1aRE5pTldFMllUSmhNRGRjSWlKOSJ9"",""id"":""/orbitdb/bafyreiejrtaennxufa3wvkdvyoj6ywq6nid3lukdqcnx2fc33tckzjzbke/ctf"",""next"":[{""/"":""bafyreibbadm2ajrr6io6ufqidibrpdjfpdyfobp2aqvmcprqu5yrk7mq6q""}],""refs"":[{""/"":""bafyreiesvykh6wt7hn4fry4mphv6ckxr5wq3c2fecvcjbqs4scbkizc6jm""},{""/"":""bafyreihq7osywkglsjxn5lmbegtc7izqmb66atx5trkrpcmlvtcyrr6nuy""},{""/"":""bafyreiab6do7qxgjipiypoj754vicpuscejf43eguvo2ykb2igoyrtkl64""}],""v"":2,""key"":""BJx/DXfZOVG6YkoHDGQvNQVMBaoeaEdEvcKFJP0PM1m3h9/o8lJgnTQkqGCAKovuOCovsDHQ5JOVs7qpJm3V8Ks="",""sig"":""MEQCIF5FwOBiQKgEI7njg6He6iAlwNc+Gj8+PAll5o1PCGhKAiBlnXg9+hinX6AGB2r0uXoJ3q9Tbe6azh9euPx40G8uqw=="",""identity"":{""id"":""02020192715ea41d7eaaceb4bd19516d0d4f1e8a2e81903480083dbdbe99dfefc9"",""publicKey"":""BJx/DXfZOVG6YkoHDGQvNQVMBaoeaEdEvcKFJP0PM1m3h9/o8lJgnTQkqGCAKovuOCovsDHQ5JOVs7qpJm3V8Ks="",""signatures"":{""id"":""MEQCIGx+GRqmTfPqcUL28aG2p1Q2TNEfZ9QlCgB8WU4my68UAiBZClP9WMe385COJ0WuNnXRj7BIolRC2v6vhLqUt3Yk/w=="",""publicKey"":""MEQCIFC+7AikjMLabNvdHiHh7rwrFTbystu6xc2r1h/1Zr4jAiBFxjxIMNjfI5J996HDYEQd+fnaKDi5GlNw5hgl+RwEOg==""},""type"":""orbitdb"",""Provider"":null},""hash"":{""/"":""bafyreihq6d33ifjj6jbmjptygyksgwzcrjm5kxarbbp6djbzqx2exij27u""},""clock"":{""id"":""BJx/DXfZOVG6YkoHDGQvNQVMBaoeaEdEvcKFJP0PM1m3h9/o8lJgnTQkqGCAKovuOCovsDHQ5JOVs7qpJm3V8Ks="",""time"":7}}]"