HTB Canvas Challenge Walkthrough
This is the walkthrough for the Canvas Challenge on Hack The Box.
HTB WALKTHROUGHS
Challenge: Canvas
Difficulty: Easy
The information about the challenge is the following:
We want to update our website but we are unable to because the developer who coded this left today. Can you take a look?
Once you download the content from HTB, when you look into the content this is what you see.
I selected the index.html to see where it leads to.
It led to a login page and after many tries, it turned out to be admin and admin for the username and password. But this just led to a dead end. You just entered the dashboard.html page.
After looking through the folders I came across the login.js file. The majority of it I couldn't really understand at first but I recognised the javascript obfuscation which I recently learnt in one of my lessons. Obfuscation is just code that is purposely made for humans to not understand. And there was a lot of it so looked suspicious.
After finally finding a decoder online (linked below) I copied and pasted the code and got an ASCII code which then had to be converted. The converted text from the ASCII was the flag.
