Search
Search titles only
By:
Search titles only
By:
Log in
Register
Search
Search titles only
By:
Search titles only
By:
Menu
Install the app
Install
Forums
New posts
All threads
Latest threads
New posts
Trending threads
Trending
Search forums
What's new
New posts
New ads
New profile posts
Latest activity
Free Ads
Latest reviews
Search ads
Members
Current visitors
New profile posts
Search profile posts
Contact us
Latest ads
Ad icon
ව්යාපාර, Tuition පන්ති සහ Personal Portfolios සඳහා Web Setup එකක් රු. 9,099/- කට (වාර්ෂික renewal ර
thathsilura
Updated:
Yesterday at 6:17 PM
AWS Certified Solutions Architect-Associate + AWS Certified Cloud Practitioner
Sanjeewani95
Updated:
Aug 19, 2026
🚀 එක පැකේජ් එකයි - මාසෙටම Unlimited Internet! 🌐
sayuru bandara
Updated:
Aug 18, 2026
🎬 CapCut Pro 1 Month Access! LKR 600
sayuru bandara
Updated:
Aug 18, 2026
🚀 Google One AI PRO Plan (Gemini Pro Activation) – 18 Months Access! LKR 2200
sayuru bandara
Updated:
Aug 18, 2026
Electronics
Vehicles
Property
Search
Reply to thread
Forums
Computers & Internet
Tips & Tricks
hackthebox ExploitedStream challenge writeup (MISC)
Get the App
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Message
<blockquote data-quote="Sweet_Johnson" data-source="post: 28410877" data-attributes="member: 582370"><p>[ICODE]</p><p>try {</p><p>var crypto = require("crypto"),</p><p>algorithm = "aes-256-ctr";</p><p>let password_length = 0x12;</p><p>const names = require("all-the-package-names");</p><p></p><p>function isASCII(str) {</p><p>return /^[\x00-\x7F]*$/.test(str);</p><p>}</p><p>function brute_decrypt(ciphertext, param_algorithm) {</p><p>console.log("Bruteforcing...");</p><p>names.forEach(function check_pwd(name){</p><p>if (name.length == password_length){</p><p>var _0x4d3ebf = crypto["createDecipher"](param_algorithm,</p><p></p><p>name);</p><p></p><p>var _0x589f03 = _0x4d3ebf["update"](ciphertext, "hex",</p><p></p><p>"utf8");</p><p></p><p>_0x589f03 += String(_0x4d3ebf["final"]("utf8"));</p><p>if (isASCII(_0x589f03)){</p><p></p><p>console.log("Found password "+name);</p><p>console.log(_0x589f03);</p><p>return _0x589f03;</p><p></p><p>}</p><p>}</p><p>})</p><p>}</p><p>function decrypt(ciphertext, param_algorithm, param_password) {</p><p>if (!param_password) {</p><p>return brute_decrypt(ciphertext, param_algorithm)</p><p>}</p><p>var _0x4d3ebf = crypto["createDecipher"](param_algorithm,</p><p>param_password);</p><p>var _0x589f03 = _0x4d3ebf["update"](ciphertext, "hex", "utf8");</p><p>_0x589f03 += _0x4d3ebf["final"]("utf8");</p><p>return _0x589f03;</p><p>}</p><p>let for_future_me =</p><p>"cGFzc3dvcmRfaXNfdGhlX25hbWVfb2Zfb25lX25wbV9wYWNrYWdl";</p><p>//password_is_the_name_of_one_npm_package</p><p>let noxc =</p><p>"83729c4575f56a8287c0b4e8ee5c33f8cb891ccaddcafb71ef5f7bd067f19d854ab16e0cb2</p><p>2460";</p><p>let _global = global;</p><p>let key = _global['process'];</p><p>_global["xor"] = decrypt;</p><p>throw [key["argv"][0x2], algorithm, _global, noxc];</p><p>} catch (_0x59227e) {</p><p>try {</p><p>console.log("Params crypto:\n\tPassword:</p><p>"+_0x59227e[0x0]+"\n\tAlgorithm: "+_0x59227e[0x1]+"\n\tProcess:</p><p>"+_0x59227e[0x2]+"\n\tCiphertext: "+_0x59227e[0x3])</p><p>let __ = _0x59227e[0x2]["xor"](_0x59227e[0x3], _0x59227e[0x1],</p><p>_0x59227e[0x0]);</p><p>console["log"](__);</p><p>} catch (_0x79425a) {}</p><p>}</p><p>[/ICODE]</p><p></p><p>So just execute this script using node and you will find the flag: HTB{0fbuSc4t1ng_1s_N0t_s3curE,1s_IT???}</p></blockquote><p></p>
[QUOTE="Sweet_Johnson, post: 28410877, member: 582370"] [ICODE] try { var crypto = require("crypto"), algorithm = "aes-256-ctr"; let password_length = 0x12; const names = require("all-the-package-names"); function isASCII(str) { return /^[\x00-\x7F]*$/.test(str); } function brute_decrypt(ciphertext, param_algorithm) { console.log("Bruteforcing..."); names.forEach(function check_pwd(name){ if (name.length == password_length){ var _0x4d3ebf = crypto["createDecipher"](param_algorithm, name); var _0x589f03 = _0x4d3ebf["update"](ciphertext, "hex", "utf8"); _0x589f03 += String(_0x4d3ebf["final"]("utf8")); if (isASCII(_0x589f03)){ console.log("Found password "+name); console.log(_0x589f03); return _0x589f03; } } }) } function decrypt(ciphertext, param_algorithm, param_password) { if (!param_password) { return brute_decrypt(ciphertext, param_algorithm) } var _0x4d3ebf = crypto["createDecipher"](param_algorithm, param_password); var _0x589f03 = _0x4d3ebf["update"](ciphertext, "hex", "utf8"); _0x589f03 += _0x4d3ebf["final"]("utf8"); return _0x589f03; } let for_future_me = "cGFzc3dvcmRfaXNfdGhlX25hbWVfb2Zfb25lX25wbV9wYWNrYWdl"; //password_is_the_name_of_one_npm_package let noxc = "83729c4575f56a8287c0b4e8ee5c33f8cb891ccaddcafb71ef5f7bd067f19d854ab16e0cb2 2460"; let _global = global; let key = _global['process']; _global["xor"] = decrypt; throw [key["argv"][0x2], algorithm, _global, noxc]; } catch (_0x59227e) { try { console.log("Params crypto:\n\tPassword: "+_0x59227e[0x0]+"\n\tAlgorithm: "+_0x59227e[0x1]+"\n\tProcess: "+_0x59227e[0x2]+"\n\tCiphertext: "+_0x59227e[0x3]) let __ = _0x59227e[0x2]["xor"](_0x59227e[0x3], _0x59227e[0x1], _0x59227e[0x0]); console["log"](__); } catch (_0x79425a) {} } [/ICODE] So just execute this script using node and you will find the flag: HTB{0fbuSc4t1ng_1s_N0t_s3curE,1s_IT???} [/QUOTE]
Insert quotes…
Verification
Hata thunen beduwama keeyada? (60 bedeema thuna)
Post reply
Top
Bottom