Avatar

Labs / Get the Password

  • Daily Challenge
  • Released 20 Jun 2025
The lab needs to be started first.
Need help to start?
Daily Challenge

Get the Password

Challenge Overview

Welcome to Get the Password, a web-based challenge that tests your understanding of web security and client-side validation! In this challenge, you'll need to find the correct password to login to a system.

Learning Objectives

  • Understanding how client-side validation works
  • Learning about web security vulnerabilities
  • Practicing reverse engineering of web applications
  • Understanding how password validation works in web applications

Challenge Details

The challenge presents you with a login form. Your mission is to find the correct password to access the system.

Technical Background

Web applications often use client-side validation to check user input before sending it to the server. This challenge demonstrates how client-side password validation can be analyzed and exploited.

Required Skills

  • Basic understanding of web technologies
  • Familiarity with browser developer tools
  • Ability to analyze JavaScript code
  • Knowledge of web security concepts

Getting Started

  1. Open the challenge page in your web browser
  2. Use the browser's developer tools (F12 or right-click -> Inspect)
  3. Look for the JavaScript code that handles password validation
  4. Analyze the code to understand how the validation works

Tips

  • Look carefully at the JavaScript code
  • Pay attention to how passwords are validated
  • Consider what tools might help you analyze the validation
  • Think about common web security techniques

Success Criteria

You will know you've solved the challenge when:

  • You've found the correct password
  • You've successfully logged into the system
  • The page confirms your success and shows the flag