Challenges → Web Exploitation

Packed Script

Medium 250 pts 🚩 168 solves ⏱ Avg. time to solve: 7d 3h

Challenge Question

A customer support widget ships to the browser as one single unreadable blob of obfuscated JavaScript. Obfuscation hides intent, but it can't hide behaviour, because the code still has to run in your browser. Unpack and deobfuscate the script, follow what it does, and work out what it quietly phones home with.
Download Challenge File

Submit Flag

Log in or sign up to submit a flag.

Details

  • CategoryWeb Exploitation
  • Authortark
  • AddedNov 6, 2026
  • Avg. Time to Solve7d 3h
  • First Blood🩸 cyb3rPh03n1x

Recent Solvers

  • Z3iiitra 2h ago
  • okejoe 4h ago
  • chandanamudhale 9h ago
  • akshathakulkarni 9h ago
  • dishawali 9h ago
  • kartiksanadi 9h ago
  • juwi 9h ago
  • Kkp 9h ago
  • vinxta 9h ago
  • sanjanamanagave 9h ago
Discuss in the forum →