Forward from: Technical Devang
🦠 How to get a INVITE code from HTB(hack the box)? 🦠
▫️ Step 1
go to the inspect elements by pressing CTRL+SHIFT+I. you can see js/inviteapi.min.js parameter that seems interesting.
▫️ Step 2
go to the https://www.hackthebox.eu/js/inviteapi.min.js and look if there is anything to do with. you will see that there is makeInviteCode. we will use it in invite page console.
▫️ Step 3
go back to invite page and open inspect elements and go to the console and just write makeInviteCode there and hit ENTER. you will see some kinda encoded code.
▫️ Step 4
it is base64 encoded. go to https://www.base64decode.org/
and decode it easily. it will give you some parameter that will give you invite code.
▫️ Step 5
you can’t get anything by make get a request to https://www.hackthebox.eu/api/invite/generate. so we will make a post request using curl.
type this command in your terminal
curl -XPOST
And you will get the invite code. but remember, a particular invite-code will work only for a particular IP. so you won’t be able to use anyone’s code.
☠ Credit to respective owners 🙏
▫️ Step 1
go to the inspect elements by pressing CTRL+SHIFT+I. you can see js/inviteapi.min.js parameter that seems interesting.
▫️ Step 2
go to the https://www.hackthebox.eu/js/inviteapi.min.js and look if there is anything to do with. you will see that there is makeInviteCode. we will use it in invite page console.
▫️ Step 3
go back to invite page and open inspect elements and go to the console and just write makeInviteCode there and hit ENTER. you will see some kinda encoded code.
▫️ Step 4
it is base64 encoded. go to https://www.base64decode.org/
and decode it easily. it will give you some parameter that will give you invite code.
▫️ Step 5
you can’t get anything by make get a request to https://www.hackthebox.eu/api/invite/generate. so we will make a post request using curl.
type this command in your terminal
curl -XPOST
And you will get the invite code. but remember, a particular invite-code will work only for a particular IP. so you won’t be able to use anyone’s code.
☠ Credit to respective owners 🙏