hac-2

learn. practice. secure

CTF 3: JavaScript Jungle

Our developer thought they were clever by encoding sensitive data in JavaScript. They even used some basic obfuscation to make it “extra secure”. Can you decode their attempt at security through obscurity?

Objective:
Decode the obfuscated JavaScript to find the credentials and flag.

CTF Challenge 3: JavaScript
Click here for hint

The data might be encoded, but it’s still there

Look for common encoding methods like Base64

Array variables with strange names often hide something

The browser’s console can be your decoder ring

Go to CTF 4: The Ultimate Challenge