Tags: web css
Rating:
# ▼▼▼Lights Out!(Web2:75pts)▼▼▼
**This writeup is written by [@kazkiti_ctf](https://twitter.com/kazkiti_ctf)**
## 【Information gathering】
```
<html>
<head>
<meta charset="utf-8" />
<title>Lights out!</title>
<link rel="stylesheet" href="main.css" />
</head>
<body>
<div class="alert alert-danger">Who turned out the lights?!?!</div>
<summary>
<div class="clearfix">
<small></small>
<small></small>
</div>
</summary>
</body>
</html>
```
---
main.css
↓
The part of `content:` seems to be flag
---
## 【exploit】
Make one that leaves only the part of `content:` as shown below
↓
```
strong[data-show]:after{content: "turned"}
strong[data-show]:before{content:"styles"}
small:after{content: "_"}
i[data-hide]:before{content:"eCTF{"}
.clearfix:before,.clearfix:after{content:"Ic"}
.clearfix:after{content:"the_lights}"}
```
↓
![](http://raw.githubusercontent.com/kazkiti/CTF-image/master/css-flag.png)
↓
`IceCTF{styles_turned_the_lights}`