HTB Register Form

Register

Saturday, 14 November, 2020 12:45 PM

Inspect element and open console and we see this

Then we proceed to sources tab to check the javascript files

Found the source of the skull one the calm.js file

The third file give away the flag by saying its obfuscated

After deobfuscated we found a javascript function , then we try this on the console

Then we run this on the console

Base 64 decode

Make a post request using curl