蓝鲸的在Hackthissite上的7到JS题作业

第一题密码是cookies~我就不解释了


第二题暂时写不出

第三题如下：这moo=7*2=14 。他要我输入X，我就输入了14个字母进去就过了。

var foo = 5 + 6 * 7 

var bar = foo % 8

var moo = bar * 2

var rar = moo / 3

function check(x)

{

        if (x.length == moo)

        {

                        alert("win!");

                        window.location += "?lvl_password="+x;

        } else {

                        alert("fail D:");
}

}

第四题如下：应为RawrRawr="moo",所以密码是moo



第五题：

<script language="Javascript">
	moo = unescape('%69%6C%6F%76%65%6D%6F%6F');
	function check (x) {
	if (x == moo)
	{
	alert("Ahh.. so that's what she means");
	window.location = "../../../missions/javascript/5/?lvl_password="+x;
	}
	else {
	alert("Nope... try again!");
	}
	}
	</script>
	<br /><h3>Javascript Mission 5:</h3>
	<br />Uhm, faith spelled runescape wrong?
	<br /><br />
	<b>Password:</b>
	<input type="password" id="pass" value=""><br />
	<button onclick="javascript:check(document.getElementById('pass').value)">Check Password</button>
	</center>

其中~我另外找了个界面~用document.write(unescape('%69%6C%6F%76%65%6D%6F%6F'))打出来 ilovemoo。
上面那个就是密码啦啦啦啦啦！

第6题

<script type="text/javascript"  src="/missions/javascript/6/checkpass"></script>
	<script language="javascript">
	RawrRawr = "moo";
	function check(x)
	{
	"+RawrRawr+" == "hack_this_site"
	if (x == ""+RawrRawr+"")
	{
	alert("Rawr! win!");
	window.location = "about:blank";
	} else {
	alert("Rawr, nope, try again!");
	}
	}
	function checkpassw(moo)
	{
	RawrRawr = moo;
	checkpass(RawrRawr);
	}
	</script>
	<p align=center>Fiftysixer decided to try his hand at javascript!<br />
	All was going well until he realized that he forgot to remove the unused code, which resulted in a confusing mess.<br />
	He didn't mind, in fact, he did his best to make it even MORE confusing!</p>
	<h2 align="center">Find the password:</h2>
	<p align="center"><input type="password" id="pass" name="lvl_password" value=""><br />
	<button onclick="javascript:checkpass(document.getElementById('pass').value)">Check Password</button></p>

这一题的源代码没有直接显示js脚本，而是用src元素加入了另一个JS脚本~打开以后就找发现有个checkpass函数了~就根据简单的逻辑找到了密码啦啦啦啦！

最后一题了，这题真是折腾死我了！

我先做了个翻译器~就是用alert弹窗的~弹出个fromCharCode write ~~~我就去查了查fromCharCode 是个什么东东！

发现它是一个 可接受一个指定的 Unicode 值，然后返回一个字符串的方法~就去吧那一堆好像16进制的东西放进去~结果密码就出来啦~哇咔咔~！