picoCTF Web Exploitation: Unminify

Hello Everyone !!

This blog covers steps to solve the Unminify challenge having Easy difficulty which is part of the picoCTF Web Exploitation category.
Access the given URL in browser and it will open a page as shown below —

As mentioned in the displayed message, Flag value is already delivered however it is not visible in the page.

So, we can use Inspect Element or view captured response in the burp suite to check if there is any hidden content present.

We can observe the flag value is disclosed in the response body. It is important to check response body or view page source to find out if application is disclosing any sensitive data.

Challenge solved. Thanks..