Misspelling — client-side routeCTF board
Web · Crate-CTF adaptation

Misspelling — client-side route

Inspect the supplied button page and determine why the click handler does not call the function that exists.

HTML / JAVASCRIPT FIXTURE button handler: getFlga() defined function: showFlag() local route: /training/flag.html observation: client-side names and routes are part of the review surface

Attribution: Adapted from Crate-CTF, 2025 challenge “Misspelling” by Johan. Used under the MIT License; flags and secrets were replaced for GisVuln. See source and license details.

This GisVuln adaptation is self-contained and does not contact the original challenge infrastructure.