webhard

Игровой автомат (Slot Machine) — Hackerlab

hackerlab

Task: Slot machine web game with JavaScript hash validation. Solution: Deobfuscated CryptoJS hash chain (SHA1→SHA256→SHA1→SHA256→MD5 using binary data), exploited SQL injection in result parameter with HEX encoding to extract admin password.

$ ls tags/ techniques/
sqlitesqlijavascriptdeobfuscationcryptojshash_chain
js_deobfuscationunion_sqlihex_extractionhash_chain_analysis
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]