BreizhCTF : Bonjour Ondine

Statement:

I’m looking for my pokemon card collection, have you seen it?

Author : Zeecka

https://ondine.ctf.bzh/

The exposed website tells us that it is under construction :

ondine

I start by doing a fuzz to search for interesting web pages with the FFUF tool :


        /'___\  /'___\           /'___\       
       /\ \__/ /\ \__/  __  __  /\ \__/       
       \ \ ,__\\ \ ,__\/\ \/\ \ \ \ ,__\      
        \ \ \_/ \ \ \_/\ \ \_\ \ \ \ \_/      
         \ \_\   \ \_\  \ \____/  \ \_\       
          \/_/    \/_/   \/___/    \/_/       

       v1.5.0
________________________________________________

 :: Method           : GET
 :: URL              : https://ondine.ctf.bzh/FUZZ
 :: Wordlist         : FUZZ: fuzz-Bo0oM.txt
 :: Follow redirects : false
 :: Calibration      : false
 :: Timeout          : 10
 :: Threads          : 40
 :: Matcher          : Response status: 200,204,301,302,307,401,403,405,500
________________________________________________

.hta                    [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess-local         [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.ht_wsr.txt             [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess               [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess-dev           [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess.save          [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess.BAK           [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess.txt           [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess.bak1          [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess.bak           [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess-marco         [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess.orig          [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess_extra         [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccessBAK            [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess_orig          [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess.old           [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess.sample        [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess_sc            [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccess~              [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccessOLD2           [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htusers                [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htgroup                [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htpasswd_test          [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htpasswd               [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htaccessOLD            [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.httr-oauth             [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htpasswd-old           [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
.htpasswds              [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 2ms]
cgi-bin/test-cgi        [Status: 200, Size: 1261, Words: 150, Lines: 43, Duration: 3ms]
index.html              [Status: 200, Size: 1105, Words: 167, Lines: 36, Duration: 3ms]
robots.txt              [Status: 200, Size: 45, Words: 4, Lines: 2, Duration: 2ms]
server-status/          [Status: 403, Size: 277, Words: 20, Lines: 10, Duration: 4ms]
:: Progress: [4842/4842] :: Job [1/1] :: 0 req/sec :: Duration: [0:00:00] :: Errors: 0 ::

I see that the server has a robots.txt file containing the following information :

User-agent: *
Disallow : /ondine_secrets.html

While going on the page /ondine_secrets.html, I notice in the source code the following code making me think of an image to rebuild :

<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='black'></td><td class='black'></td><td class='black'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>
<tr><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td><td class='white'></td></tr>

To reconstruct the image, I performed a rather ugly search and replace by replacing the white value with # and black with a blank character :

ondine1

The QRCode returns the URL /poke_hidden_form.html

By inspecting the source code of this new page, I quickly notice the presence of a JSfuck script:

[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]][([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]][([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]((!![]+[])[+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+([][[]]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+!+[]]+([]+[])[(![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(!![]+[])[+[]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]()[+!+[]+[!+[]+!+[]]]+((!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+([][[]]+[])[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(![]+[])[!+[]+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+([][[]]+[])[!+[]+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[+[]]+(![]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(+(+!+[]+[+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+[!+[]+!+[]]+[+[]])+[])[+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]]+[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]]+[!+[]+!+[]+!+[]]+[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[+!+[]]+[+!+[]]+[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]]+[+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+([![]]+[][[]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+([][[]]+[])[!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(+(+!+[]+[+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+[!+[]+!+[]]+[+[]])+[])[+!+[]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+([][[]]+[])[+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]]+(+(+!+[]+[+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+[!+[]+!+[]]+[+[]])+[])[+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]]+(!![]+[])[+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]+!+[]+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]])[(![]+[])[!+[]+!+[]+!+[]]+(+(!+[]+!+[]+[+!+[]]+[+!+[]]))[(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([]+[])[([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]][([][[]]+[])[+!+[]]+(![]+[])[+!+[]]+((+[])[([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]+[])[+!+[]+[+!+[]]]+(!![]+[])[!+[]+!+[]+!+[]]]](!+[]+!+[]+!+[]+[+!+[]])[+!+[]]+(![]+[])[!+[]+!+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(!![]+[])[+[]]]((!![]+[])[+[]])[([][(!![]+[])[!+[]+!+[]+!+[]]+([][[]]+[])[+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(!![]+[])[!+[]+!+[]+!+[]]+(![]+[])[!+[]+!+[]+!+[]]]()+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([![]]+[][[]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]](([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]][([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]((!![]+[])[+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+([][[]]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+!+[]]+(![]+[+[]])[([![]]+[][[]])[+!+[]+[+[]]]+(!![]+[])[+[]]+(![]+[])[+!+[]]+(![]+[])[!+[]+!+[]]+([![]]+[][[]])[+!+[]+[+[]]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(![]+[])[!+[]+!+[]+!+[]]]()[+!+[]+[+[]]]+![]+(![]+[+[]])[([![]]+[][[]])[+!+[]+[+[]]]+(!![]+[])[+[]]+(![]+[])[+!+[]]+(![]+[])[!+[]+!+[]]+([![]]+[][[]])[+!+[]+[+[]]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(![]+[])[!+[]+!+[]+!+[]]]()[+!+[]+[+[]]])()[([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]((![]+[+[]])[([![]]+[][[]])[+!+[]+[+[]]]+(!![]+[])[+[]]+(![]+[])[+!+[]]+(![]+[])[!+[]+!+[]]+([![]]+[][[]])[+!+[]+[+[]]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(![]+[])[!+[]+!+[]+!+[]]]()[+!+[]+[+[]]])+[])[+!+[]])+([]+[])[(![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(!![]+[])[+[]]+([][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+(![]+[])[!+[]+!+[]]+(![]+[])[+!+[]]+(!![]+[])[+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]()[+!+[]+[!+[]+!+[]]])())()

I get the value of the script by decoding it via this site:

var a = prompt("Entrez le mot de passe."); if (a == atob('cGlLYS1waUthIQ==')){ window.location = "/"+a+".html";}

I just need to decode the string in base64:

echo -n "cGlLYS1waUthIQ==" | base64 -d

#output
piKa-piKa!

And authenticate with the password on the page /poke_hidden_form.html

ondine2

Flag: BZHCTF{piKa-piKa!}