Web Task
The football world is still talking about Argentina’s legendary 2022 World Cup victory. To celebrate the occasion, PitchScope has published a special collection of articles, reports, and exclusive coverage dedicated to the tournament. At first glance, everything seems perfectly normal, but not every story is meant to be seen by casual visitors. Rumors suggest that a hidden piece of content was left somewhere within the website by a devoted football fan. Your mission is simple: explore the website, inspect everything carefully, follow the clues, and uncover the secret hidden within Argentina’s road to glory. Sometimes the biggest discoveries aren’t found on the page itself.
https://pitchscope.netlify.app/
This is the website we were given
Get Hellan’s stories in your inbox
Join Medium for free to get updates from this writer.
On opening the website, I explored every page like a normal visitor to look for any visible clues and found none which made me think the clue was probably in the source than the page itself.
Then I went to inspect the page as this is a web challenge and it seemed like the next logical step and found a base64 cipher hidden in the comments where usually clues in ctf are stored.
On decoding the base64 string in online cipher decoding websites /Argentina2022 was received and it looked like part of a path so I put that to the url and it directed to another page.
It showed a simple login page with the username already given. All that remained was the password. Similar to before I went to inspect again and lo and behold the password was hidden in the comments.
and after entering the username as LionelMessi and password as Rosario, the hidden page finally revealed the flag.
Looking back, the challenge description had already hinted at the solution. The clue wasn’t on the webpage it was hidden inside the page’s source.
