Hands-on lab

JS Lockpick

Free

Reverse Engineeringoffensivebeginner

Questions

2

Points

50

Players solved it

8

About this lab

A leaked internal activation page for Horizon Licensing. It's a single static HTML file with no server and no backend. The activation check runs entirely in the browser.

Objective

Nothing you type ever leaves the browser, so the key that unlocks this page has to be here already. Read the page the way the browser does, work out how it recognises a correct activation key, and recover that key by hand rather than guessing at the input field.

Files

  • challenge/index.html: open it directly in a browser or a text editor.

Skills you practice

Difficulty: Beginner

  • Offensive security

More labs

Also on HackFury: courses, CTF events, FurySOC blue team practice, certifications, and managed bug bounty programs.