How to Hack "HACK THE BOX" website!!

The HackTheBox is an legal online platform allowing you to test your penetration testing or hacking skills. In order to SignUp to "HackTheBox" website, you have to hack into that website and get invite code. Since i am pretty much like challenges and hacking stuffs, today tutorial is all about how to break into "hackTheBox" site and get invite code.
  
First of all go to https://www.hackthebox.eu/invite page, the page who has only one text box with big huge SignUp button with creepy smile face.

Right click on the page and go to INSPECT ELEMENT or PAGE-SOURCE. In there we have to find "javascript" file that make our precious invite code. So i began to search  under "invite" keyword and found javascript file called "/js/inviteapi.min.js". 

So, the next thing we have to do is go to that javascript file and see if we can get any hint about generating invite code. You can simply view javascript code by modifying website url, https://www.hackthebox.eu/js/inviteapi.min.js

After carefully examine this javascript file, you can clearly see function called "MakeInviteCode()". The invite code generating using POST request. What we need to do is, call the function and grab that POST response.

So, now we know the function that generates InviteCode!! lets run it using "console" in "Inspect Element"

Inspect-Element of https://www.hackthebox.eu/invite

After run the function in console, go to "Network tab". In there you can see POST request are appear. Go to response tab and see our code is there!!

 

 

Response received by calling "makeInviteCode()" function

So, its seems like response data is encoded by base64.. lets decode and see what's in it.

Groovy.. After decoding, the repose message is look like this.

 

Well,What we waiting for?? lets send POST request to that URL then.. You can use RESTCLIENT plugin in firefox to send POST request.

Response

 well, finally.. Decode this response using base64 and you'll get your invite code!!.

 

Congratulations!!  You successfully hack into the "HackTheBox". Now you can become a member of HackTheBox community!!

All Rights Reserved

Article By : Nisal Priyanka aka COD-HORA 

 

CYBER SECURITY

Google Hacking Cheat Sheet

[ DOWNLOAD ]

SQL Injection Cheat Sheet

[ DOWNLOAD ]

PROXY CHAIN - evade detection when hacking

[ DOWNLAOD ]

DOS attacks ( simple explanation )

[ READ ]

How to implement Cross-site Request Forgery protection in web applications via Synchronizer Token Patterns.

Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF or XSRF, is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web application trusts. There are many ways in which a malicious website can transmit such commands; specially-crafted image tags, hidden forms, and JavaScript XMLHttpRequests, for example, can all work without the user's interaction or even knowledge. Unlike cross-site scripting (XSS), which exploits the trust a user has for a particular site, CSRF exploits the trust that a site has in a user's browser. [Wikipedia]

Passive Information Gathering - Online Hacking tools

Google Hacking  

Locate security vulnerabilities on the internet using search engines, such as Google can called as Google hacking. We can identify Google Hacking as a passive information gathering techniques. Generally, there are two types of vulnerabilities we can found on the web: Software vulnerabilities and misconfigurations.

  For the example, imagine we need to gather information about hotels in United State. Most of the people that didn’t aware of Google Footprint Techniques do it like following,

How to insert images into database using JAVA SWING

Insert Images into any database using JAVA SWING APP

(Special Tutorial for beginners)

PART 1 - Basic handling of image

Fundamentals of Java Swing

JAVA SWING - Tutorial 1

     This tutorial will help you to understand basics of Java Swing. Mainly we use java swing to create GUI(Graphically User Interface) Applications. You can easily create your application using popular IDE's like Net Beans, Eclipse.etc. But in this tutorial i am going to use Text Editor to coding and cmd to compile my program. So, lets start...

      In this tutorial we are going to develop small login box using java swing.

    so, before start coding our application we need to import "javax.swing" library to our program. 

        import javax.swing.*

     Here is definitions of some keywords we frequently use in Java Swing,

  JFrame : Use this to create instance of JFrame. Simply this represent window of our application.

  JPanel  : This is same as <div> tag in HTML. Inside this, we can create Buttons, Text Fields, Forms.etc

Java Challenge - 1

Java Challenge - 1

     Welcome to newly event of my website! If you want to prove you are a JAVA PROFESSIONAL, here is chance for that. Gear up , find solution, Test the solution and beat the challenge! Best solution will display on the web site!

JAVA INPUT STREAM

     This tutorial will show to you how to read user inputs when you creating a console applications. Most of the time in programming we need to get user inputs. So in JAVA simplest way to read user input is System.console().

   class test1
    {
        public static void main()
        {
           System.out.println("Type your name");
           String name = System.console().readLine();
           System.out.println("Your name is :"+name);
        }
    }

     You can successfully run this method in "command Line" in windows. But if you use IDE like "Eclipse", it will generate errors. 

Hot Speed : Invasion of Sri Lanka

Hot Speed

Are you like racing? or develop pc games? here is the big chance. This is first release of HOT SPEED series.This PC game is also 100% Free and Open Source. Join with us to Develop this game. Play this game, tell us what we need to be improve. We will upload our project files to this website soon. 

SCRIPT,3D MODEL,SOUND COMPOSE and DEVELOPE by Nisal Priyanka

Game Engine = 3D RAD (Open Source)
Script Language = Angel Script (Open Source)

How to create simple login box using PHP

PHP Login Box

     Hello everyone, after a long time today i came up with new tutorial. Today i am going to teach you How to create a Login Box Using PHP.

        First of all you have to create interface to your login box using basic HTML <input> element.

 

How to Install LAMP server into Linux or Ubunto

How to install apache, PHP, MySql, PHPmyAdmin into Linux/Ubunto 

  Today i came up with very interesting, also very useful tutorial. Today i am going tell you, How to Install LAMP server into LINUX , UBUNTU. here is the complete video! It has all you want to know. :-) .. JUST comment , subscribe and Like my video! 

How to map ER to Relational Schema in DBMS

Steps to Draw relational schema

     Follow following steps to draw relational schema correctly,

1.       Match Regular Entities
2.       Match Weak Entities
3.       Match 1:1 Relations **
4.       Match 1:N Relations **
5.       Match N:M Relations **
6.       Match Multi-Value entities
7.       Match N'Arrays
8.       Match Recursive Relationship

Brief About Database Management System (Part - 2)

DBMS Part 2

  Here is the part 2 of DBMS. If you not yet read part 1, click here to read.

  Multi-valued Attributes

Attributes that have more than one value called "Multi -valued attributes ".

We can graphically represent Multi-valued attributes in ER-Diagram like following,

How to create class in C++

Class In C++

     Today i am going to explain you how to create class using c++ programming language. First of all, what is the meaning of Class? why we need classes? Class is a user defined type or data structure declare with keyword class that has DATA and FUNCTIONS(Methods). Class is a kind of structure. We can develop new data types using classes.

How to set Microsoft SQL server 2012 in First Time

Microsoft SQL Server - 2012 HELPS for beginners

Its is little bit hard to set things in SQL in First Time. Because you are the beginner for this software. Today i came up with new tutorial to explain step by steps How to set MS SQL server 2012 and restore your own database into it.

Brief About Database Management System (PART - 1)

DBMS 

• What is a Database?

     Database is a collection of related data. It is a collection of Schema, tables, quarries, reports, views and other objects.

• Who use Databases?

     Libraries , Banks , Military , Airlines , Supermarkets.etc

• What is DBMS?

Useful Things about Internet

Who help create guidelines for Internet?

    World Wide Web Consortium (W3C)
    Web Hypertext Application Technology Working Group (WHATWG)
    Internet Engineering Task Force(IETF)

Hypertext - Hypertext is a text that is capable of moving from one document to another. This can be done by clicking on the hypertext. 

Useful Things in HTML (Lesson 3)

How to add Images and Hyperlink to your website

     Hello reader, welcome to Useful Things in HTML Lesson 3. Before you read this, if you doesn't have any basic knowledge about HTML, then read LESSON 1 and LESSON 2.

     Most of webpages have Images and Hyperlinks. Actually without Images and Hyperlinks, it is difficult to create successful/ attractive website / webpage. Hence, today my tutorial is about How to add Images and Hyperlinks to your website. 

Useful things in HTML (Lesson 2)

How to create a Table in HTML?

      Today my HTML tutorial is about how to create a TABLE using HTML codes. Before you read this if you don't have any basic knowledge about HTML visit 1'st lesson and read it first, click HERE to see 1'st lesson. 

     Here is the tags that we use to create tables

Useful things in HTML (Lesson 1)

     This tutorials is for beginners in WEB DEVELOPING. First of all I'd like to talk about what is HTML? HTML stand for Hyper Text Markup Language. It is the standard markup language used to create web pages. Along with CSS and JavaScript, HTML is a cornerstone technology used to create web pages, as well as to create user interfaces for mobile and web applications. Also we use web browsers to read that HTML.

     HTML elements are the building blocks of HTML page. HTML elements are delineated by TAGS, writing using angle brackets.

                ex - <h1>Here is the Heading</h1>

Here is the Useful Tags in HTML - 1