Unit 7: Organisational System Security

  1. Firstly i had to visit the website (hack the box).You will need an invite code,to get to the next step.
  2. Right-click on the join page, then click inspect element.
  3. After you will have to look through the element tab for the script with the source.The source will be called /js/inviteapi.min.js

4.After go back to https://www.hackthebox.eu/invite,after you will see a js file.

5.Then go to the console tab in chrome, and type makeInviteCode() then press enter.You will get some data.After open up base64 and put the encoding type in it.

6. When you click the small arrow alongside data, you will see the encoding type to be Base64.

7.After decode the message. Look for a Base64 Decryptor and put the data in from base64.

8.Copy the data and decode by placing it in the base64 Decryptor.

9. After you have to POST request to https://www.hackthebox.eu/api/invite/generate.

10. Request it by typing curl-XPOST https://www.hackthebox.eu/api/invite/generate, in terminal. And you will get more data (message).

11. Then you will get a success message, which looks like this:

12. This isn’t the invite code, as it says format:encoded.

13. Paste the code you got as the response of the POST request into the textbox.

14. Go to https://www.hackthebox.eu/invite and paste the invite code you got in the textbox asking for the same.

15. You are good to go!

Design a site like this with WordPress.com
Get started