JustForFun
Search…
⌃K

HackTheBox Lab – Invite Code Write-Up

A friend showed me this lab. I have just started solving the HTB Lab. And I will share the solvings step by step. The Lab has 20 machines that Linux and Windows. The registration that I had the most fun ever seen until now.
I will explain first challange: invite code.
First, you should invite yourself.
Actually, there is no one who sending the invite code. You should invite yourself. Search for inviting.
I found a hint in the javascript console. A skull was waiting me.
I was review the js files. Specially /js/inviteapi.min.js
  1. 1.
    I typed this function name in console. And SUPRISE!
I decoded the data by base64.
  1. 1.
    I prepared a POST request to /api/invite/generate.
I found a new code in JSON Response.
I decoded the new code by base64.
Shall we begin! To be continued.
-EOF-
July 5 2017