From 629146f68fad66c6ff8352906e40704a11b925ca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Simon=20Bu=C3=9Fmann?= <simon.bussmann@tum.de>
Date: Sat, 2 Mar 2024 03:46:08 +0100
Subject: [PATCH] test

---
 .../intro_web_2_session.session.lck           | Bin 16 -> 16 bytes
 .../web/intro_web_2/leaked_sites/train.html   |  52 ++++++++++++++++++
 cscg24/web/intro_web_2/notes.md               |   2 +
 3 files changed, 54 insertions(+)
 create mode 100644 cscg24/web/intro_web_2/leaked_sites/train.html
 create mode 100644 cscg24/web/intro_web_2/notes.md
diff --git a/cscg24/web/intro_web_2/intro_web_2_session.session.lck b/cscg24/web/intro_web_2/intro_web_2_session.session.lck
index ada58ee70eea8a197b7bb006ce670b5a8c296e92..4dbe9e2db114ebb6f11c78db3a6e68cd25acb7d0 100644
GIT binary patch
literal 16
XcmeYW4)pQyclKsrVC?<N`-~F+CZq)E

literal 16
XcmeYW4)pQyclKsrVC?<Nc{~CDCaDD#

diff --git a/cscg24/web/intro_web_2/leaked_sites/train.html b/cscg24/web/intro_web_2/leaked_sites/train.html
new file mode 100644
index 0000000..085e71a
--- /dev/null
+++ b/cscg24/web/intro_web_2/leaked_sites/train.html
@@ -0,0 +1,52 @@
+<html>
+<head>
+    <title>Intro to Web 2</title>
+    <meta charset="UTF-8">
+    <link rel="stylesheet" type="text/css" href="style.css" />
+</head>
+<body>
+<h1>$(GERMAN_CITY) Tram Ticket Machine</h1>
+
+<h3>Get your <span style="text-decoration: line-through;">ticket</span> flag here!</h3>
+<hr>
+With the help of our state-of-the-art floppy disk switching robots, you can now read the first
+part of the flag in real time!
+<p>
+Flag part 1/4: <span style="color: green; font-family: 'Courier New', monospace;">
+    CSCG{<span id="flag">........</span></span>
+
+<!--
+No time to wait, right?
+-->
+
+<script>
+flag = "l9jj550K"
+symbolsRevealed = 0
+waitTime = 1000;
+
+function nextSymbol() {
+    if (symbolsRevealed >= flag.length) return;
+    symbolsRevealed++;
+
+    waitTime *= 2;
+    setTimeout(nextSymbol, waitTime);
+}
+
+function spin() {
+    const flagPart = flag.substr(0, symbolsRevealed);
+    const alphabet = ("ABCDEFGHIJKLMNOPRSTUVWXYZabcdefhiklmnorstuvwxz0123456789")
+    const randomSymbol =
+        symbolsRevealed < flag.length
+            ? alphabet.charAt(Math.floor(Math.random() * alphabet.length))
+            : "";
+    const suffix = ".".repeat(Math.max(0, flag.length - 1 - symbolsRevealed));
+
+    document.getElementById("flag").innerHTML = flagPart + randomSymbol + suffix;
+}
+
+setTimeout(nextSymbol, waitTime);
+setInterval(spin, 50);
+</script>
+
+</body>
+</html>
diff --git a/cscg24/web/intro_web_2/notes.md b/cscg24/web/intro_web_2/notes.md
new file mode 100644
index 0000000..a2674bb
--- /dev/null
+++ b/cscg24/web/intro_web_2/notes.md
@@ -0,0 +1,2 @@
+### 1.Part
+We can spoof our OS with the help of ZAP and get the site [train.html](leaked_sites/train.html) 
