Start the machine, hack the system, and find the hidden flags to complete this challenge and earn points!
This walkthrough explains how to hack the lab and capture the flags. For help with Learning Mode questions, use the Request Hint button next to each question.
The challenge presents a web page with an input field. The flag is hidden in the JavaScript code, encoded as an array of hexadecimal values.
Open the browser's Developer Tools (F12 or right-click -> Inspect) and look at the JavaScript code. You'll find an array called encodedData containing hexadecimal values:
const encodedData = [
"0x35", "0x38", "0x65", "0x33", "0x62", "0x66", "0x66", "0x2d",
"0x36", "0x33", "0x39", "0x38", "0x2d", "0x34", "0x31", "0x34",
"0x66", "0x2d", "0x62", "0x37", "0x32", "0x62", "0x2d", "0x65",
"0x39", "0x63", "0x63", "0x61", "0x31", "0x64", "0x35", "0x63",
"0x62", "0x62", "0x37"
];
There are two ways to decode the flag:
In the browser's console, you can use the decodeFlag() function that's already defined in the code:
decodeFlag()
Each hexadecimal value in the array represents a character in the flag. You can decode it manually by:
The decoded flag will be a UUID. To complete the challenge:
If you entered the correct flag, the page will confirm your success:
58e3bff-6398-414f-b72b-e9cca1d5cbb7
String.fromCharCode() function is used to convert the values to charactersChoose how you want to get started
Choose a username to get started
We've sent a 9-character code to your email