M0N73 CRIS70

R ecently I found another website that have more advanced hacking challenges...I know I need to cover other websites which i have promised you but something in this website is interesting.For registering in this website,you need to hack and get an invite code.So, I thought to deviate from our regular topic and talk about it. The WEBSITE is HACK THE BOX They are asking invite code for registering.As usual i checked source-code of the page.Since I found nothing suspicious,I started looking at JavaScript and found one that seems can help me. <script defer src="/js/inviteapi.min.js"></script> I visited the js..There is a script and i found some keywords from that like "log","invite","verifyInviteCode","makeInviteCode" I went back to our registration page now right clicked and selected inspect. SELECT CONSOLE  Try typing in each keyword and check if function exist. I got output when i checked  veri...

As you all know(even if you dont know let me tell you) I am not any elite hacker. I am learning like all of you.May be it is because I haven't found vulnerability in any sites other than these challenge sites (myself),my confidence is very low. But something occurred today that lifted my confidence a little higher. what was it?? Well..first of all let me ask you, have you seen the game menu in this blog? which has hangman game for you to play? Well I was playing in it today and got wrong guess always..then i thought ,why on earth i can't win even this small game!!   Then an Idea struck me!! what if like all this challenge site, there is vulnerability in this game which is a simple code i have copied from another website without even reading it! I right clicked on the "Guess" button and  selected inspect!  There i saw  <input name="ratebutton" type="button" value="Guess" onclick="pruefeZeichen()"> now I know...