# HTB Register Form

### ![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2FZF2Tdo3z9ubpd7FEWcbd%2F0?alt=media)Register

Saturday, 14 November, 2020 12:45 PM

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2Fxkb5JVhg5ul1yqdOr3oD%2F1?alt=media)

Inspect element and open console and we see this

Then we proceed to sources tab to check the javascript files

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2Fw7QuWYEsvUVxypgtMEON%2F2?alt=media)

Found the source of the skull one the calm.js file

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2F8JtQYoquwlyzHbnCFQzD%2F3?alt=media)

The third file give away the flag by saying its obfuscated

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2FKx7bFJ9Z1ZLldie5Cd7Q%2F4?alt=media)

After deobfuscated we found a javascript function , then we try this on the console

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2FxOXB4HbuBteioD0hfsfp%2F5?alt=media)

Then we run this on the console

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2FYJAPfUE8YwHjOap2Em2M%2F6?alt=media)

Base 64 decode

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2FVqRbA5kfM2TbizwXqsMe%2F7?alt=media)

Make a post request using curl

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2FZl6XToGX17FH4mBVoJTe%2F8?alt=media)

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2FdeNbFjD9yEGDRFqAwSrU%2F9?alt=media)

![](https://2011733002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUXBmBmYDcC25imVwnzZE%2Fuploads%2FzBlE8f2rJhFca5XBZRP3%2F10?alt=media)
