From 8228f24185b2d7cdb4d48df92069b281e2413a05 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Thu, 5 Sep 2024 18:49:14 +0200
Subject: [PATCH] web/bookmarklet

---
 web/bookmarklet/index.html | 75 ++++++++++++++++++++++++++++++++++++++
 web/bookmarklet/solve.js   | 12 ++++++
 2 files changed, 87 insertions(+)
 create mode 100644 web/bookmarklet/index.html
 create mode 100755 web/bookmarklet/solve.js
diff --git a/web/bookmarklet/index.html b/web/bookmarklet/index.html
new file mode 100644
index 0000000..7c95b55
--- /dev/null
+++ b/web/bookmarklet/index.html
@@ -0,0 +1,75 @@
+<!doctype html>
+<html lang="en">
+
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>picoCTF - picoGym | Bookmarklet Challenge</title>
+    <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
+    <style>
+        body {
+            font-family: "Lucida Console", Monaco, monospace;
+        }
+
+        h1,
+        p {
+            color: #000000;
+        }
+    </style>
+    <!-- Sources: https://picoctf.org | https://undraw.co -->
+</head>
+
+<body class="picoctf{}" style="margin: 0">
+    <div class="picoctf{}" style="margin: 0; padding: 0; background-color: #757575; display:auto; height:40%">
+        <a class="picoctf{}" href="/"><img src="picoctf-logo-horizontal-white.svg" alt="picoCTF logo"
+                style="display: inline-block; width:160px; height:90px; padding-left: 30px"></a>
+    </div>
+
+    <center>
+        <br class="picoctf{}">
+        <br class="picoctf{}">
+        <div class="picoctf{}"
+            style="padding-top:30px; border-radius:3%; box-shadow: 0px 5px 10px #0000004d; width: 50%; align-self: center;">
+            <img class="picoctf{}" src="hero.svg" alt="flag art" style="width: 150px; height: 150px;">
+            <div class="picoctf{}" style="width:85%">
+                <h2 class="picoctf{}">Welcome to my flag distribution website!</h2>
+                <div class="picoctf{}" style="width:70%">
+                    <p class="picoctf{}">If you're reading this, your browser has succesfully received the flag.</p>
+                    <p class="picoctf{}">Here's a bookmarklet for you to try:</p>
+
+                    <textarea id="bookmarkletCode" rows="3" cols="45" style="color:#000000" readonly>
+        javascript:(function() {
+            var encryptedFlag = "àÒÆÞ¦È¬ëÙ£ÖÓÚåÛÑ¢ÕÓÒËÉ§©í";
+            var key = "picoctf";
+            var decryptedFlag = "";
+            for (var i = 0; i < encryptedFlag.length; i++) {
+                decryptedFlag += String.fromCharCode((encryptedFlag.charCodeAt(i) - key.charCodeAt(i % key.length) + 256) % 256);
+            }
+            alert(decryptedFlag);
+        })();
+    </textarea>
+
+                    <div id="notice" style="display: none; color: green;">Code copied to clipboard!</div>
+
+                    <script>
+                        var codeTextArea = document.getElementById("bookmarkletCode");
+                        var notice = document.getElementById("notice");
+
+                        codeTextArea.addEventListener("click", function () {
+                            codeTextArea.select();
+                            document.execCommand("copy");
+                            notice.style.display = "block";
+
+                            setTimeout(function () {
+                                notice.style.display = "none";
+                            }, 2000);
+                        });
+                    </script>
+
+                </div>
+            </div>
+            <br class="picoctf{}">
+    </center>
+</body>
+
+</html>
diff --git a/web/bookmarklet/solve.js b/web/bookmarklet/solve.js
new file mode 100755
index 0000000..1eb64cd
--- /dev/null
+++ b/web/bookmarklet/solve.js
@@ -0,0 +1,12 @@
+#!/usr/bin/env nix-shell
+/*
+#!nix-shell -i node -p nodejs
+*/
+
+var encryptedFlag = "àÒÆÞ¦È¬ëÙ£ÖÓÚåÛÑ¢ÕÓÒËÉ§©í";
+var key = "picoctf";
+var decryptedFlag = "";
+for (var i = 0; i < encryptedFlag.length; i++) {
+    decryptedFlag += String.fromCharCode((encryptedFlag.charCodeAt(i) - key.charCodeAt(i % key.length) + 256) % 256);
+}
+console.log(decryptedFlag)
