level1
var el = document.getElementById('pw');
if(el.value=="tooeasy")
tooeasy
level2
var pw = "%64%62%33%64%38";
var el = document.getElementById('pw');
if(el.value==unescape(pw))
unescape("%64%62%33%64%38")=db3d8
level3
var el = document.getElementById("pw");
if(el.value==unescape("r%20i%20g%20h%20t%20")+""+"p"+"w"+""+"1313dc45e")
r i g h t pw1313dc45e
level4
var pwinfo = "2c5e4d55b03eedc4d5 b";
pwinfo.length=20
level5
el.value==(atoi("o")+20)
// converts a character to its ASCII number
function atoi(a)
{
return a.charCodeAt();
}
o的ascii码加上20
level6
rgb2hex(document.getElementById("though").style.color)==#99ff33
level7
Robots协议用来告知搜索引擎哪些页面能被抓取，哪些页面不能被抓取
https://0xf.at/robots.txt
Disallow: /play/solutionforlevel7
在这个页面可以找到password
level8
点击ok发现url携带pw
?pw=e6f00d58acaf95b2c8ef5c2152ff0
把第一个0替换成o
e6fo0d58acaf95b2c8ef5c2152ff0
level9
var foo = 5 + 6 * 7;
var bar = foo % 8; //modulo.. look it up if you don't know what it does
var moo = bar + 1;
moo=8
el.value.length
输入一个长度为8的密码
level10
字符串和变量的区别
引号成对出现，里面是字符串，不带引号的是变量
CodeCode="mooc85"
