Tags: web css 

Rating:

# ▼▼▼Lights Out!(Web2:75pts)▼▼▼
**This writeup is written by [@kazkiti_ctf](https://twitter.com/kazkiti_ctf)**

## 【Information gathering】

```

<html>
<head>
<meta charset="utf-8" />
<title>Lights out!</title>
<link rel="stylesheet" href="main.css" />
</head>
<body>
<div class="alert alert-danger">Who turned out the lights?!?!</div>
<summary>
<div class="clearfix">


<small></small>

<small></small>
</div>
</summary>
</body>
</html>
```

---

main.css

The part of `content:` seems to be flag

---

## 【exploit】

Make one that leaves only the part of `content:` as shown below

```
strong[data-show]:after{content: "turned"}
strong[data-show]:before{content:"styles"}
small:after{content: "_"}
i[data-hide]:before{content:"eCTF{"}
.clearfix:before,.clearfix:after{content:"Ic"}
.clearfix:after{content:"the_lights}"}
```

![](http://raw.githubusercontent.com/kazkiti/CTF-image/master/css-flag.png)

`IceCTF{styles_turned_the_lights}`