Step 1: Click on the green button to Start the Lab
Step 2: Hack the URL or IP of the lab
Step 3: Use your skills and logic to find the flags!
The challenge presents a web page with an input field. The flag is hidden in the JavaScript code, encoded as an array of hexadecimal values.
Open the browser's Developer Tools (F12 or right-click -> Inspect) and look at the JavaScript code. You'll find an array called encodedData
containing hexadecimal values:
const encodedData = [
"0x35", "0x38", "0x65", "0x33", "0x62", "0x66", "0x66", "0x2d",
"0x36", "0x33", "0x39", "0x38", "0x2d", "0x34", "0x31", "0x34",
"0x66", "0x2d", "0x62", "0x37", "0x32", "0x62", "0x2d", "0x65",
"0x39", "0x63", "0x63", "0x61", "0x31", "0x64", "0x35", "0x63",
"0x62", "0x62", "0x37"
];
There are two ways to decode the flag:
In the browser's console, you can use the decodeFlag()
function that's already defined in the code:
decodeFlag()
Each hexadecimal value in the array represents a character in the flag. You can decode it manually by:
The decoded flag will be a UUID. To complete the challenge:
If you entered the correct flag, the page will confirm your success:
58e3bff-6398-414f-b72b-e9cca1d5cbb7
String.fromCharCode()
function is used to convert the values to charactersSign-in to your account to access your hacking courses and cyber security labs.
Access all hacking courses and cyber security labs.