Deobfuscation

Using what you learned in this section, try to deobfuscate 'secret.js' in order to get the content of the flag. What is the flag?

For this lag we have to access the target using a web browser.

Since we already know that we have to deobfuscate 'secret.js', lets do an Inspect to the webpage, and go to the Debugger tab.

Accessing the target

We can see that ,js code is all written in a single line. Lets do a Beautify by clicking in the brackets bellow.

Code beautified

Now the code is more readable, but it's using a packer obfuscation. Lets use UnPacker to deobuscate this code.

As we can see, the code was successfully deobfuscated!