How To Get a HackTheBox Invite Code! (Outdated)
Tags: hacking, security, hackthebox, api
Published: 2021-09-17 18:35:08

<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-8pXwFpH1k8I/X4ylFPxqdxI/AAAAAAAAAcw/d6xYTZO8N3sVyvu6WyU-AXUC2KZuOUYDgCNcBGAsYHQ/s0/hackthebox.png"
    style="display: block; padding: 1em 0; text-align: center; "
  >
    <img
      alt=""
      border="0"
      data-original-height="800"
      data-original-width="3000"
      src="https://1.bp.blogspot.com/-8pXwFpH1k8I/X4ylFPxqdxI/AAAAAAAAAcw/d6xYTZO8N3sVyvu6WyU-AXUC2KZuOUYDgCNcBGAsYHQ/s0/hackthebox.png"
    />
  </a>
</div>

<h1>How To Get a HackTheBox Invite Code.</h1>
<p>
  So you want to practice penetration testing, you're looking around on your
  favorite search engine for a few pen-testing labs. Low and behold, you come
  across the holy grail that is
  <a href="hackthebox.eu" target="_blank">hackthebox</a>, you're interested in
  joining, so you click the "Join Now" button at the top right of the webpage.
  Expecting to be met with the basic username and password sign up, you're
  greeted with this...
</p>

<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-NceHp4xvMt0/X4zXFnthSkI/AAAAAAAAAc8/TJw1kSeYvNsPC-7rH5Fad9fvWpfFKv6OgCNcBGAsYHQ/s0/2020-10-18%2B19_58_31-Hack%2BThe%2BBox%2B__%2BCan%2Byou%2Bhack%2Bthis%2Bbox_%2B-%2BBrave.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="240"
      data-original-width="361"
      src="https://1.bp.blogspot.com/-NceHp4xvMt0/X4zXFnthSkI/AAAAAAAAAc8/TJw1kSeYvNsPC-7rH5Fad9fvWpfFKv6OgCNcBGAsYHQ/s0/2020-10-18%2B19_58_31-Hack%2BThe%2BBox%2B__%2BCan%2Byou%2Bhack%2Bthis%2Bbox_%2B-%2BBrave.png"
  /></a>
</div>

<br /><br /><br />
<h1>Challenge Accepted.</h1>
<p>
  To start things off let's look at the signup/invite page in its entirety.
</p>

<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-jJriP4WNllw/X4zxAdCQ-uI/AAAAAAAAAdU/Jn57nPGNTnQpFmKI00h0ohsSP2Utmv9uwCNcBGAsYHQ/s0/Screenshot%2B%2528196%2529.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="1079"
      data-original-width="1079"
      src="https://1.bp.blogspot.com/-jJriP4WNllw/X4zxAdCQ-uI/AAAAAAAAAdU/Jn57nPGNTnQpFmKI00h0ohsSP2Utmv9uwCNcBGAsYHQ/s0/Screenshot%2B%2528196%2529.png"
  /></a>
</div>

<p>
  As you can see there's a "Click Here" button for help, there's a good chance
  you've already clicked the said button and are wondering what to do afterward.
  Head over to Developer Tools by pressing
  <span style="color:yellow;">F12</span> or
  <span style="color:yellow;">CTRL+Shift+I</span> and head to the
  <span style="color:yellow;">Console</span> tab. You will then be greeted by a
  nifty looking banner, here you will see another hint
  <span class="quote"
    >"This page loads an interesting javascript file. See if you can find it
    :)"</span
  >
</p>

<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-xEwtZMc6Icg/X41QrkcActI/AAAAAAAAAdo/wUVBzu9A1F0XVoQAgEpb-lCNyVry9xWqQCNcBGAsYHQ/s0/2020-10-19%2B04_36_07-Hack%2BThe%2BBox%2B__%2BCan%2Byou%2Bhack%2Bthis%2Bbox_%2B-%2BBrave.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="450"
      data-original-width="550"
      src="https://1.bp.blogspot.com/-xEwtZMc6Icg/X41QrkcActI/AAAAAAAAAdo/wUVBzu9A1F0XVoQAgEpb-lCNyVry9xWqQCNcBGAsYHQ/s0/2020-10-19%2B04_36_07-Hack%2BThe%2BBox%2B__%2BCan%2Byou%2Bhack%2Bthis%2Bbox_%2B-%2BBrave.png"
  /></a>
</div>

<h1>Getting Closer...</h1>
<p>
  With another clue to guide us in the right direction, we can now head over to
  the <span style="color:yellow;">Sources</span> tab to view the source code for
  the webpage. In the <span style="color:yellow;">Sources</span> tab head over
  to the <span style="color:yellow;">Page</span> sidebar, there you will find
  the folders <span style="color:yellow;">css</span>,
  <span style="color:yellow;">images</span>,
  <span style="color:yellow;">js</span>. Inside the
  <span style="color:yellow;">js</span> folder, you'll find a file that should
  catch your eye and it's titled
  <span style="color:yellow;">inviteapi.min.js</span>. I wonder what could be in
  this file... Once inside the file, you'll see a long single line of code,
  you'll want to <span style="color:yellow;">Pretty-Print</span> to make the
  code a bit more readable.
</p>

<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-gMazAz0niOA/X41rijUl4LI/AAAAAAAAAeM/3InF0IqrmHobUCvFcMmeQw013bgUMu3mgCNcBGAsYHQ/s0/2020-10-19%2B06_03_13-NVIDIA%2BGeForce%2BOverlay.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="525"
      data-original-width="878"
      src="https://1.bp.blogspot.com/-gMazAz0niOA/X41rijUl4LI/AAAAAAAAAeM/3InF0IqrmHobUCvFcMmeQw013bgUMu3mgCNcBGAsYHQ/s0/2020-10-19%2B06_03_13-NVIDIA%2BGeForce%2BOverlay.png"
  /></a>
</div>
<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-JPzRO0PG-7s/X41rks7MTiI/AAAAAAAAAeU/C-wWVBZQwiAaSDmEvYz7DwxOA8U6DhdcwCNcBGAsYHQ/s0/2020-10-19%2B06_32_15-Hack%2BThe%2BBox%2B__%2BCan%2Byou%2Bhack%2Bthis%2Bbox_%2B-%2BBrave.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="164"
      data-original-width="316"
      src="https://1.bp.blogspot.com/-JPzRO0PG-7s/X41rks7MTiI/AAAAAAAAAeU/C-wWVBZQwiAaSDmEvYz7DwxOA8U6DhdcwCNcBGAsYHQ/s0/2020-10-19%2B06_32_15-Hack%2BThe%2BBox%2B__%2BCan%2Byou%2Bhack%2Bthis%2Bbox_%2B-%2BBrave.png"
  /></a>
</div>

<p>
  Once <span style="color:yellow;">Pretty-Print</span> is enabled, the code
  should look like this...
</p>
<code class="js" style="background: black; font-size:20px; width:100%;">
//This javascript code looks strange...is it obfuscated???

eval(function(p, a, c, k, e, r) {
    e = function(c) {
        return c.toString(a)
    }
    ;
    if (!''.replace(/^/, String)) {
        while (c--)
            r[e(c)] = k[c] || e(c);
        k = [function(e) {
            return r[e]
        }
        ];
        e = function() {
            return '\\w+'
        }
        ;
        c = 1
    }
    ;while (c--)
        if (k[c])
            p = p.replace(new RegExp('\\b' + e(c) + '\\b','g'), k[c]);
    return p
}('0 3(){$.4({5:"6",7:"8",9:\'/b/c/d/e/f\',g:0(a){1.2(a)},h:0(a){1.2(a)}})}', 18, 18, 'function|console|log|makeInviteCode|ajax|type|POST|dataType|json|url||api|invite|how|to|generate|success|error'.split('|'), 0, {}))
</code>
<p>
  Now that we have a better idea of what we're looking at, we can observe the
  code a little better. At first glance, the code seems a bit complex, but we
  can still extract a few keywords like:
  <li><span class="quote">"makeInviteCode"</span></li>
  <li><span class="quote">"generate"</span></li>
  <li><span class="quote">"success"</span></li>
  <br />
</p>

<p>
  Although, if you have some experience in programming, there should be a few
  keywords that also stand out to you, such as:

  <li><span class="quote">"ajax"</span></li>
  <li><span class="quote">"POST"</span></li>
  <li><span class="quote">"json"</span></li>
  <li><span class="quote">"url"</span></li>
  <li><span class="quote">"api"</span></li>
  <br />
</p>

<p>
  If these 5 keywords look familiar to you, then you probably can guess what is
  coming next 😉,<span style="font-size:5px;">(POST Request)</span> BUT before
  we get to that there's still one more clue that we missed if you got too
  caught up scratching your brain, trying to figure out what on Earth you're
  looking at. Then you probably looked over the most important clue in all of
  the code...
</p>

<h2>Obfuscation</h2>
<p>
  Taking a look back at the code, in the very first line some text is commented
  out reading,
  <span class="quote"
    >"This javascript code looks strange...is it obfuscated???"</span
  >
  <span class="quote">"hmmm... obfuscated??? What does that mean? 🤔</span> you
  are probably thinking to yourself, well let's take a trip to Dictionary.com.
</p>
<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-LxrSypOWKWM/X41_wh-LmkI/AAAAAAAAAeo/fhH7GrbTRcAUAv8Xmdq2JKzidMGaVBQ6QCNcBGAsYHQ/s0/obfuscate.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="388"
      data-original-width="860"
      src="https://1.bp.blogspot.com/-LxrSypOWKWM/X41_wh-LmkI/AAAAAAAAAeo/fhH7GrbTRcAUAv8Xmdq2JKzidMGaVBQ6QCNcBGAsYHQ/s0/obfuscate.png"
  /></a>
</div>

<p>
  In programming, obfuscation is used to
  <span class="quote">"to confuse, bewilder, or stupefy."</span> those who try
  to read the code. With that said now, you're probably thinking
  <span class="quote">"how do we deobfuscate the code then?"</span> For
  deobfuscation we will be using an online tool called
  <a href="https://lelinhtinh.github.io/de4js/" target="_blank">de4js</a> by
  <a href="https://github.com/lelinhtinh" target="_blank">lelinhtinh</a>, the
  tool is super easy to use, all you have to do is copy and paste the JavaScript
  code into the textbox and click
  <span style="color:yellow;">Auto Decode</span>, and BOOM! You have the original
  JavaScript code.
</p>

<code class="js" style="background: black; font-size:20px; width:100%;">
function makeInviteCode() {
    $.ajax({
        type: "POST",
        dataType: "json",
        url: '/api/invite/how/to/generate',
        success: function (a) {
            console.log(a)
        },
        error: function (a) {
            console.log(a)
        }
    })
}
</code>

<p>
  Now that we can see the original code, we can see that the
  <span class="quote">"makeInviteCode"</span> is actually a function that
  creates the API key, and this is where those 5 programming keywords we
  mentioned early now come into play.
</p>

<h2>POST Requests</h2>
<p>
  Within the function we see that ajax is being used,
  <a href="https://en.wikipedia.org/wiki/Ajax_(programming)" target="_blank">
    "Ajax is a set of web development techniques using many web technologies on
    the client side to create asynchronous web applications. With Ajax, web
    applications can send and retrieve data from a server asynchronously without
    interfering with the display and behaviour of the existing page.
  </a>

  We can see in the function that, the type of data that Ajax is sending to the
  server is a POST and it is being sent to the url:
  <span style="color:yellow;">'/api/invite/how/to/generate'</span>.
  <span>
    Now that we have an idea of what Ajax is doing in the function, let's talk a
    little about what a POST request is and how to make a POST request to the
    server.
  </span>
  <a href="https://en.wikipedia.org/wiki/POST_(HTTP)" target="_blank">
    In computing, POST is a request method supported by HTTP used by the World
    Wide Web. By design, the POST request method requests that a web server
    accepts the data enclosed in the body of the request message, most likely
    for storing it.[1] It is often used when uploading a file or when submitting
    a completed web form.
  </a>
  To make a POST request to the HTB server, we will be using this amazingly easy
  to use tool called <a href="https://reqbin.com/" target="_blank">reqbin</a>.
  Simply type the main website URL
  <span style="color:yellow;">"hackthebox.eu"</span> into the text field and
  then take the URL from the
  <span style="color:yellow;">makeInviteCode</span> function and append them
  this should be your final URL for the POST request:
  <span style="color:yellow;">hackthebox.eu/api/invite/how/to/generate</span>
  Now you're all set to send the POST request!
</p>
<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-3spucOqkBlo/X42zxKaPgaI/AAAAAAAAAe0/Wi9QR4VZKAQTookuYjhCo1dD5EV1iWU7QCNcBGAsYHQ/s0/POST%2Breq.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="178"
      data-original-width="655"
      src="https://1.bp.blogspot.com/-3spucOqkBlo/X42zxKaPgaI/AAAAAAAAAe0/Wi9QR4VZKAQTookuYjhCo1dD5EV1iWU7QCNcBGAsYHQ/s0/POST%2Breq.png"
  /></a>
</div>

<p>
  Once you've sent the POST request you should receive a status code of
  <span style="color:yellow;">200(OK)</span> meaning that the request was sent
  successfully, and should also receive data inside of curly brackets. This data
  is called <span style="color:yellow;">JSON</span> or
  <span style="color:yellow;">JavaScript Object Notation</span> it's essentially
  a data type primarily used to store and transmit data. If you look back to the
  <span style="color:yellow;">makeInviteCode</span> function you can see that
  the person who wrote the code is telling Ajax the data type to expect when
  making the POST request is JSON. The JSON data that you received should look
  something like this.
</p>
<code class="json" style="background: black; font-size:20px; width:100%;">
{
    "success": 1,
    "data": {
        "data": "SW4gb3JkZXIgdG8gZ2VuZXJhdGUgdGhlIGludml0ZSBjb2RlLCBtYWtlIGEgUE9TVCByZXF1ZXN0IHRvIC9hcGkvaW52aXRlL2dlbmVyYXRl",
        "enctype": "BASE64"
    },
    "hint": "Data is encrypted \u2026 We should probably check the encryption type in order to decrypt it\u2026",
    "0": 200
}
</code>

<p>
  Now we are in the home stretch, and time to solve the second to last hint to
  get our invite code.<span class=".quote"
    >"Data is encrypted. We should probably check the encryption type in order
    to decrypt it."</span
  >.
</p>

<h2>Base64</h2>
<p>
  Picking up from where we left off, upon inspecting the JSON data we can see an
  attribute called <span style="color:yellow;">"enctype": "BASE64".</span>
  <a href="https://base64.guru/" target="_blank"
    >Base64 is the most popular binary-to-text algorithm used to convert data as
    plain text in order to prevent data corruption during transmission between
    different storage mediums. In addition, it is often used to embed binary
    data into text documents such as HTML, CSS, JavaScript, or XML.</a
  >
  (XML has been replaced by JSON). To decrypt the data we will need to use a
  base64 decoder, we could use the many base64 decoders online. Instead, I
  decided to make my own in python just for the fun of it 😁.
</p>
<code class="python" style="background: black; font-size:20px; width:100%;">
import base64
import subprocess
from sys import platform

def osCheck():
    if platform == "win32":

        while True:
            try:
                subprocess.call(['cls'],shell=True) 
                modeSelect = input('Select a conversion mode: \n1: Encode\n2: Decode\n0: Exit\n\nSelection: ')
                if modeSelect == '1':

                    def enc():
                        subprocess.call(['cls'], shell=True)
                        userInput = input("Enter plain text here: ")
                        subprocess.call(['cls'], shell=True)

                        """
                        Uses base64 library to encode and decode text
                        https://docs.python.org/3/library/base64.html
                        """
                        b64enc = base64.b64encode(userInput.encode('utf-8'))

                        print('Original Text: ' + userInput + '\n\nEncoded Conversions\n_______________________\n\nBase64 Encoded:', b64enc.decode())

                        input('\n\n\nPress Enter to continue...')

                    enc()


                if modeSelect == '2':
                    subprocess.call(['cls'],shell=True)
                    def b64dec():
                        try:
                            subprocess.call(['cls'], shell=True)
                            userInput = input("Enter encoded text here: ")
                            subprocess.call(['cls'], shell=True)

                            """
                            Uses base64 library to encode and decode text
                            https://docs.python.org/3/library/base64.html
                            """
                            b64dec = base64.b64decode(userInput)

                            print('Converted Text: ' + b64dec.decode() + '\nBase64 Encoded: ', userInput)
                            input('\n\n\nPress Enter to continue...')


                        except:
                            input('Incorrect text format, please enter encoded Base64.\n\nPress enter')
                    b64dec()  


                if modeSelect == '0':
                    subprocess.call(['cls'], shell=True)
                    break

            except KeyboardInterrupt:
                subprocess.call(['cls'], shell=True)
                input('Program Terminated. Press Enter to continue...')
                subprocess.call(['cls'], shell=True)

                break
    if platform == "linux" or platform == "linux2" or platform == "darwin":

        while True:
            try:
                subprocess.call(['clear'],shell=True) 
                modeSelect = input('Select a conversion mode: \n1: Encode\n2: Decode\n0: Exit\n\nSelection: ')
                if modeSelect == '1':

                    def enc():
                        subprocess.call(['clear'], shell=True)
                        userInput = input("Enter plain text here: ")
                        subprocess.call(['clear'], shell=True)

                        """
                        Uses base64 library to encode and decode text
                        https://docs.python.org/3/library/base64.html
                        """
                        b64enc = base64.b64encode(userInput.encode('utf-8'))

                        print('Original Text: ' + userInput + '\n\nEncoded Conversions\n_______________________\n\nBase64 Encoded:', b64enc.decode())

                        input('\n\n\nPress Enter to continue...')

                    enc()


                if modeSelect == '2':
                    subprocess.call(['clear'],shell=True)
                    def b64dec():
                        try:
                            subprocess.call(['clear'], shell=True)
                            userInput = input("Enter encoded text here: ")
                            subprocess.call(['clear'], shell=True)

                            """
                            Uses base64 library to encode and decode text
                            https://docs.python.org/3/library/base64.html
                            """
                            b64dec = base64.b64decode(userInput)

                            print('Converted Text: ' + b64dec.decode() + '\nBase64 Encoded: ', userInput)
                            input('\n\n\nPress Enter to continue...')


                        except:
                            input('Incorrect text format, please enter encoded Base64.\n\nPress enter')
                    b64dec()  


                if modeSelect == '0':
                    subprocess.call(['clear'], shell=True)
                    break

            except KeyboardInterrupt:
                subprocess.call(['clear'], shell=True)
                input('Program Terminated. Press Enter to continue...')
                subprocess.call(['clear'], shell=True)

                break
osCheck()
</code>
<p>
  <a href="https://github.com/L0WK3Y-IAAN/text-converter.py" target="_blank"
    >text-converter.py | GitHub</a
  ><br /><br />

  You try out the script on an online IDE called
  <a href="repl.it" target="_blank">Repl.it</a> or of course, you can use an
  online decoder, for this demonstration I will be using the decoder I wrote on
  Repl.it:
  <a href="https://repl.it/@L0WK3Y/FuchsiaTepidProfessional" target="_blank"
    >L0WK3Y's Text Encoder/Decoder</a
  >. Once you are on Repl select the decode mode and then copy and paste the
  encoded data string from the JSON into the terminal, and the script will
  decode the data string for you and give you the last URL string for the last
  POST request to getting the invite code
  <span style="color:yellow;">/api/invite/generate</span>. Now it's time to head
  back to <a href="https://reqbin.com/" target="_blank">reqbin</a> for the final
  POST request.
</p>

<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-AGCsFtcAIkg/X43HjRerweI/AAAAAAAAAfI/6Z2bFN-E0I0mNrQKzPccnHi_wnN_CMXBwCNcBGAsYHQ/s0/1.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="109"
      data-original-width="220"
      src="https://1.bp.blogspot.com/-AGCsFtcAIkg/X43HjRerweI/AAAAAAAAAfI/6Z2bFN-E0I0mNrQKzPccnHi_wnN_CMXBwCNcBGAsYHQ/s0/1.png"
  /></a>
</div>
<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-zM3VZSS2QW0/X43Hja4EGbI/AAAAAAAAAfA/gH-i-a6kmNshpjiREPoUe44NabfTUoyGACNcBGAsYHQ/s0/2.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="63"
      data-original-width="750"
      src="https://1.bp.blogspot.com/-zM3VZSS2QW0/X43Hja4EGbI/AAAAAAAAAfA/gH-i-a6kmNshpjiREPoUe44NabfTUoyGACNcBGAsYHQ/s0/2.png"
  /></a>
</div>
<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-e7-cdFjfSF0/X43HjV_Js0I/AAAAAAAAAfE/7WQGdWaK-dgaVhPpjNfGeTLzQOwJ86cngCNcBGAsYHQ/s0/3.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="102"
      data-original-width="1010"
      src="https://1.bp.blogspot.com/-e7-cdFjfSF0/X43HjV_Js0I/AAAAAAAAAfE/7WQGdWaK-dgaVhPpjNfGeTLzQOwJ86cngCNcBGAsYHQ/s0/3.png"
  /></a>
</div>

<h1>Invite Code Acquired</h1>
<p>
  We've finally reached the last stage of our quest to getting the invite code
  to <a href="hackthebox.eu" target="_blank">hackthebox</a> once you've made a
  POST request to
  <span style="color:yellow;">hackthebox.eu/api/invite/generate</span>.
</p>

<code class="json" style="background: black; font-size:20px; width:100%;">
{
    "success": 1,
    "data": {
        "code": "Q0VUQ1EtUk5FRlItT0VES1ktTUtQTk0tSkNaVU4=",
        "format": "encoded"
    },
    "0": 200
}
</code>
<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-v2FxkEYccYA/X43N_xd1_uI/AAAAAAAAAfc/PiVJ_QHL1Y0pdoIWfN02A2Mt8A_LY1VygCNcBGAsYHQ/s0/inv%2Bcode.png"
    style="display: block; padding: 1em 0; text-align: center; "
  ></a>
</div>
<p>
  You will receive yet another base64 encoded data string. Just pop that bad boy
  in the text decoder again and you've got your invite code!
</p>
<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-cqpFSoEwLxw/X43RAZDmnrI/AAAAAAAAAfo/G4CRc4UJnJQD_iQtCpFxixKYu7sEEv2WgCNcBGAsYHQ/s0/inv%2Bcode.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="102"
      data-original-width="466"
      src="https://1.bp.blogspot.com/-cqpFSoEwLxw/X43RAZDmnrI/AAAAAAAAAfo/G4CRc4UJnJQD_iQtCpFxixKYu7sEEv2WgCNcBGAsYHQ/s0/inv%2Bcode.png"
  /></a>
</div>
<p>
  There it is in all of its glory the final key to getting into
  <a href="hackthebox.eu" target="_blank">hackthebox</a>, with that said, this
  concluding our journey to getting the invite code for
  <a href="hackthebox.eu" target="_blank">hackthebox</a>. I hope you've learned
  a lot from this blog and hope you continue to strive in your cybersecurity
  endeavors. This has been your guide L0WK3Y, and I hope you visit again in
  another learning adventure with me. Happy Hacking! 😊
</p>

<div class="separator" style="clear: both;">
  <a
    href="https://1.bp.blogspot.com/-KUVkp-ebO-c/X43Th3I0t-I/AAAAAAAAAf0/R4zIarmodpQasYQksR-tRpjXOu5j8cmeQCNcBGAsYHQ/s0/l0wk3y%2Bwallpaper.png"
    style="display: block; padding: 1em 0; text-align: center; "
    ><img
      alt=""
      border="0"
      data-original-height="1080"
      data-original-width="1920"
      src="https://1.bp.blogspot.com/-KUVkp-ebO-c/X43Th3I0t-I/AAAAAAAAAf0/R4zIarmodpQasYQksR-tRpjXOu5j8cmeQCNcBGAsYHQ/s0/l0wk3y%2Bwallpaper.png"
  /></a>
</div>

# Connect With Me 😊 

[![Website](https://img.shields.io/website?label=IAANSec&style=for-the-badge&url=https%3A%2F%2Fiaansec.com&color=green)](https://iaansec.com) [![Website](https://img.shields.io/website?label=dev.to&style=for-the-badge&url=https%3A%2F%2Fdev.to/l0wk3y&color=orange)](https://dev.to/l0wk3y) [![Website](https://img.shields.io/website?label=GitHub&style=for-the-badge&url=https%3A%2F%2Fgithub.com/l0wk3y&color=yellow)](https://github.com/L0WK3Y-IAAN) [![Website](https://img.shields.io/website?label=LinkedIn&style=for-the-badge&url=https%3A%2F%2Flinkedin.com/in/l0wk3yiaansec&color=blue)](https://www.linkedin.com/in/l0wk3yiaansec)