0xf.at writeup

level1

var el = document.getElementById('pw');
if(el.value=="tooeasy")

tooeasy

level2

var pw = "%64%62%33%64%38";
var el = document.getElementById('pw');
if(el.value==unescape(pw))

unescape("%64%62%33%64%38")=db3d8

level3

var el = document.getElementById("pw");     
if(el.value==unescape("r%20i%20g%20h%20t%20")+""+"p"+"w"+""+"1313dc45e")

r i g h t pw1313dc45e

level4

var pwinfo = "2c5e4d55b03eedc4d5 b";
pwinfo.length=20

level5

el.value==(atoi("o")+20)
// converts a character to its ASCII number
function atoi(a)
{
        return a.charCodeAt();
}

o的ascii码加上20

level6

rgb2hex(document.getElementById("though").style.color)==#99ff33

level7

Robots协议用来告知搜索引擎哪些页面能被抓取，哪些页面不能被抓取

https://0xf.at/robots.txt
Disallow: /play/solutionforlevel7
在这个页面可以找到password

level8

点击ok发现url携带pw
?pw=e6f00d58acaf95b2c8ef5c2152ff0
把第一个0替换成o
e6fo0d58acaf95b2c8ef5c2152ff0

level9

var foo = 5 + 6 * 7;
var bar = foo % 8; //modulo.. look it up if you don't know what it does
var moo = bar + 1;
moo=8

el.value.length
输入一个长度为8的密码

level10

字符串和变量的区别
引号成对出现，里面是字符串，不带引号的是变量

CodeCode="mooc85"