# ▼▼▼Deery (Web:20pts)▼▼▼**This writeup is written by [@kazkiti_ctf](https://twitter.com/kazkiti_ctf)**
```deery.woodlandhighschool.xyz```
---
**【Understanding function】**
```GET / HTTP/1.1Host: deery.woodlandhighschool.xyz```
↓
```・・・<script>    function dontUDare(){      document.onmousedown=function(event){        while(true) {		alert("Don't poke me like that");		alert("Go away, I'm too shy...");		alert("No...");		alert("I said no...");        }      }    }  </script>・・・```
↓
When clicking with mouse, alert is displayed.
Although there are sign up and sign in buttons, there was no place to send a request.
---
**【I will go checking javasvript】**
↓
```GET /components/transition.js HTTP/1.1Host: deery.woodlandhighschool.xyz```
↓
Although the source code was long, searching with flag caught me.
↓
``` // of course that here is the flag, what did you expect? // timctf{Woodland_highschool_rocks_in_2018}```
↓
`timctf{Woodland_highschool_rocks_in_2018}`