blob: f4270ad28ce0ae63a894e456fdc99eca833b783a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
We can no longer edit the pipeline directly, but we can add stuff to `webpack.config.js` which is executed as a normal JS file, so we can access `$FLAG` with `process.env.flag`
The flag is filtered out again, I went probably overkill and copied a ROT13 function to obscure it:
```js
function cipherRot13(str) {
str = str.toUpperCase();
return str.replace(/[A-Z]/g, rot13);
function rot13(correspondance) {
const charCode = correspondance.charCodeAt();
//A = 65, Z = 90
return String.fromCharCode(
((charCode + 13) <= 90) ? charCode + 13
: (charCode + 13) % 90 + 64
);
}
}
console.log(cipherRot13(process.env.FLAG))
// rest of webpack.config.js
```
Reversing the ROT13, we get `punk_{7KN3O181O6W1A6XS}`.
|
