Hack The Box-入門注冊

邀請碼獲取

訪問邀請碼頁面

https://www.hackthebox.eu/invite 

查看hint后去console里看看。查看js文件

把這一段復制下來js解密

本地起一個html用來解碼

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<script> 
a=62; 
function encode() { 
 var code = document.getElementById('code').value; 
 code = code.replace(/[\r\n]+/g, ''); 
 code = code.replace(/'/g, "\\'"); 
 var tmp = code.match(/\b(\w+)\b/g); 
 tmp.sort(); 
 var dict = []; 
 var i, t = ''; 
 for(var i=0; i<tmp.length; i++) { 
   if(tmp[i] != t) dict.push(t = tmp[i]); 
 } 
 var len = dict.length; 
 var ch; 
 for(i=0; i<len; i++) { 
   ch = num(i); 
   code = code.replace(new RegExp('\\b'+dict[i]+'\\b','g'), ch); 
   if(ch == dict[i]) dict[i] = ''; 
 } 
 document.getElementById('code').value = "eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)d[e(c)]=k[c]||e(c);k=[function(e){return d[e]}];e=function(){return'\\\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\\\b'+e(c)+'\\\\b','g'),k[c]);return p}(" 
   + "'"+code+"',"+a+","+len+",'"+ dict.join('|')+"'.split('|'),0,{}))"; 
} 

function num(c) { 
 return(c<a?'':num(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36)); 
} 

function run() { 
 eval(document.getElementById('code').value); 
} 

function decode() { 
 var code = document.getElementById('code').value; 
 code = code.replace(/^eval/, ''); 
 document.getElementById('code').value = eval(code); 
} 
</script> 


<textarea id=code cols=120 rows=20> 

</textarea> 
<input type=button onclick=encode() value=編碼> 
<input type=button onclick=run() value=執行> 
<input type=button onclick=decode() value=解碼> 

得到解密后的代碼

function makeInviteCode(){$.ajax({type:"POST",dataType:"json",url:'/api/invite/how/to/generate',success:function(a){console.log(a)},error:function(a){console.log(a)}})}

得知去訪問/api/invite/how/to/generate並用post方法傳

ROT13解密這一段data

In order to generate the invite code, make a POST request to /api/invite/generate

再用post方法訪問/api/invite/generate

得到一段base64代碼，解碼后得到邀請碼

reCaptcha validation failed解決方法

獲得邀請碼后進去注冊頁面，但發現submit時會提示reCaptcha validation failed

如果遇到這個情況，則是因為谷歌驗證加載不出來

用gooreplacer替換資源

再次注冊成功