THM - Traverse

A writeup for the room Traverse on TryHackMe

Challenge your secure coding skills to restore a compromised website.

This room is about a compromised website that needs to be restored.

The website is compromised by an attacker who has uploaded a web shell and renamed a file used to manage the server.

https://tryhackme.com/room/traverse

Task 1 - Traverse

1. What type of encoding is used by the hackers to obfuscate the JavaScript file?

The website on port 80 doesn’t have much to offer.

Even if there isn’t much to do here, there might be something in the code.

There is a custom Javascript file that may be of interest.