So our guys know this year we are going to sign up a new user into the network, so you cannot create
a new user normally.
So you need to solve a challenge to get the, uh, sign up page.
So click on this joint.
Now we can go to this website had the work started.
So let's do this.
So they're turning this page to go to court.
And so let's use the source code.
So it's in one.
So it's a one liner.
So it's right.
Click and inspect this one.
So there is the, uh, front desk and a notepad dot mythologist, so this may be used to get the invite
code, so that's right.
Click on this carpooling address.
Now open this new page.
Now we have got some JavaScript function and it's being obfuscated.
So easy to get to.
Can see here there is a backup.
So Bakare means in general is used to back something that cannot be understood by the woman.
So you can see here, it's very tough to read this call.
Before that, we will, uh, make this beautiful.
So this is a one liner or this is also called reunification.
So, uh, making the every call and tailcoat into the one line is called verification.
So are we going to be extremely beautiful?
So this beautiful format that according to the site, it's copy paste and format, extremely new know.
So this is the original call.
This is a series of poker.
So there is a lot of things going on.
So here this is another pack arriving, so.
So one thing you can expect is there will be a random token, so here it is and it takes a group, so
it's loading some randomly generated token and then it's showing the invite.
So maybe this can be our secret or random generated that.
Copy this.
OK, I know where we are, so let's call this one.
So this is a diverse group.
OK, let's copy this and is nice.
So this is a website which you can in which you can be obfuscate this obfuscated JavaScript code.
So means so you can there is a uh or you can understand in the human language reconsolidate log of a
variable, then you will get easily.
So there is this, uh, obfuscation to hide from others, uh, to reveal the code.
So here you can enter this obfuscated code and you can get the nice, uh, meaning of this JavaScript
function.
So page it in here and click on this.
Nice.
So I think this is the one we got this we wish.
So let's not forget.
So this is the, uh oh netcode we need to actually examine.
You can see this is IDEX request, so there is a push to quash.
So decision making.
Wait.
This is a function maybe executed on the server side.
Are we to send the post request in a type different format to this?
You are.
OK, I think so.
So you can see Unsuccess, we need to send it as a variable here and it is outputting on to the console
server.
So we need to make the post request to this, uh, in a different format and to this year so you can
use the call, but I'm not going to open it up, so I'm going to use the online call.
So let's try this push to Questcor minuses to this bond display unnecessary data, and we need to specify
this.
You are that is this one.
Let's copy this one.
Sorry.
So check the box that is the domain name and the part is this one.
And we need to send the parameters like the postulator saw before data, and you can see here the function
is taking that as a variable name.
So I think we need to send this data as it is available.
So let's copy this.
And it is equal to this one.
And we need to set up a post.
Let's send this one.
So could not result at the box.
Sorry for the.
OK, we have got the success and we have got some data.
You can see this is the data and the encryption type is a raw property, which is router 13.
So that's copy this one.
And that's a drop in decoder ring.
Let's go ahead and decode this one page in here and click on this or that.
So in order to generate the inside could make a post request to in white generate.
So we need to remove this one, remove this whole, too, so this is the character you are now.
So we need to make the EPA in general so that EPA in regulate and consent.
So we have got this one, this, you can see a string ending there is equal to maybe the most cases
it's a 64, so that's a base64 becherer.
And pasted in here and decode this one.
So this is the in code that is copied and pasted in here and you can sign up
now.
You can see congratulations.
Now you can use the username here and email and the password and of these checkboxes and register.
So that's how you all do the sign up for the hacked.
But, uh, it's pretty easy.
It's, uh, the odd about this group obfuscation.